0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afca42eb537d619e2375c4a828dc1ef726e69ed7cb4ce897006de0ba53564ebc41ee4f598786fc2df7d6f90bde8b084955decee04a6e12b9891a4c7c0816b6253467d0f5b5d7a6578d38115477b2d05826485bde9313bb9c2e36f55dece59d699e860ae4740a87b83af4a3849c5a5142d1dec588dbe8b3d69799e4c2b94edf6b7206cd39ecb5c828ec09252b8355b7242999efc12d7cbad66291e951a4c64a819ad9a3628dd347bf6a6f77116e5bcdc38aeb7c313c845c1e3d33ba4d947df47c5ac31e4b0f3", 0x1ba}], 0x3)

03:37:04 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1831.803163] input: syz1 as /devices/virtual/input/input150
[ 1831.911815] input: syz1 as /devices/virtual/input/input151
03:37:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x1ba}], 0x3)

03:37:06 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:06 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[ 1834.275554] input: syz1 as /devices/virtual/input/input152
[ 1834.333629] input: syz1 as /devices/virtual/input/input153
[ 1836.495263] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[ 1836.508141] modprobe cpuset=/ mems_allowed=0-1
[ 1836.513324] CPU: 1 PID: 11972 Comm: modprobe Not tainted 4.14.171-syzkaller #0
[ 1836.520723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1836.530094] Call Trace:
[ 1836.532702]  dump_stack+0x13e/0x194
[ 1836.536686]  dump_header+0x178/0x6d4
[ 1836.540413]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1836.545443]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1836.550557]  ? ___ratelimit+0x50/0x519
[ 1836.554459]  oom_kill_process.cold+0x10/0xae3
[ 1836.558965]  ? lock_acquire+0x170/0x3f0
[ 1836.562948]  ? lock_downgrade+0x6e0/0x6e0
[ 1836.567105]  out_of_memory+0x2d5/0x1110
[ 1836.571085]  ? oom_killer_disable+0x1c0/0x1c0
[ 1836.575595]  ? mutex_trylock+0x152/0x1a0
[ 1836.579654]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1836.584503]  ? warn_alloc+0xf0/0xf0
[ 1836.588117]  ? find_held_lock+0x2d/0x110
[ 1836.592226]  ? fs_reclaim_acquire+0x10/0x10
[ 1836.596809]  __alloc_pages_nodemask+0x5d3/0x700
[ 1836.601488]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1836.606556]  ? find_held_lock+0x2d/0x110
[ 1836.610616]  ? cache_grow_begin+0x32d/0x410
[ 1836.615169]  cache_grow_begin+0x7b/0x410
[ 1836.619230]  ? __cpuset_node_allowed+0xfa/0x450
[ 1836.623904]  fallback_alloc+0x205/0x2b0
[ 1836.627891]  kmem_cache_alloc+0x1ea/0x770
[ 1836.632043]  getname_flags+0xc8/0x560
[ 1836.635852]  do_sys_open+0x1c4/0x3f0
[ 1836.639566]  ? filp_open+0x60/0x60
[ 1836.643099]  ? do_munmap+0xd30/0xd30
[ 1836.646820]  ? do_syscall_64+0x4c/0x640
[ 1836.650780]  ? do_sys_open+0x3f0/0x3f0
[ 1836.654652]  do_syscall_64+0x1d5/0x640
[ 1836.658545]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1836.663732] RIP: 0033:0x7f28d02c0120
[ 1836.667485] RSP: 002b:00007ffd56124248 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1836.675186] RAX: ffffffffffffffda RBX: 000055e957f79436 RCX: 00007f28d02c0120
[ 1836.686009] RDX: 00007ffd56124484 RSI: 0000000000080000 RDI: 00007ffd56124460
[ 1836.693271] RBP: 000055e957f791e0 R08: 0000000000000000 R09: 000055e957f79099
[ 1836.700538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1836.707813] R13: 000055e957f79090 R14: 000055e957f79190 R15: 00007ffd56124460
[ 1836.716088] Mem-Info:
[ 1836.718503] active_anon:1320638 inactive_anon:201 isolated_anon:0
[ 1836.718503]  active_file:26 inactive_file:10 isolated_file:16
[ 1836.718503]  unevictable:0 dirty:3 writeback:0 unstable:0
[ 1836.718503]  slab_reclaimable:18526 slab_unreclaimable:120652
[ 1836.718503]  mapped:52225 shmem:253 pagetables:31619 bounce:0
[ 1836.718503]  free:23001 free_pcp:60 free_cma:0
[ 1836.752437] Node 0 active_anon:1932936kB inactive_anon:768kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 770048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1836.780194] Node 1 active_anon:3349616kB inactive_anon:36kB active_file:108kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:22908kB dirty:12kB writeback:0kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1836.808805] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4104kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1836.835457] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1836.841184] Node 0 DMA32 free:27884kB min:36272kB low:45340kB high:54408kB active_anon:1928832kB inactive_anon:768kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12128kB pagetables:40520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1836.871344] lowmem_reserve[]: 0 0 0 0 0
[ 1836.875335] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1836.900836] lowmem_reserve[]: 0 0 0 0 0
[ 1836.904826] Node 1 Normal free:53612kB min:53612kB low:67012kB high:80412kB active_anon:3349616kB inactive_anon:36kB active_file:60kB inactive_file:180kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30528kB pagetables:85932kB bounce:0kB free_pcp:240kB local_pcp:0kB free_cma:0kB
[ 1836.934080] lowmem_reserve[]: 0 0 0 0 0
[ 1836.938067] Node 0 DMA: 12*4kB (EH) 68*8kB (UMEH) 36*16kB (UMH) 12*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10384kB
[ 1836.954339] Node 0 DMA32: 59*4kB (UME) 1294*8kB (UME) 573*16kB (UME) 188*32kB (UME) 1*64kB (E) 0*128kB 2*256kB (ME) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 27884kB
[ 1836.969645] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1836.980830] Node 1 Normal: 37*4kB (UMH) 121*8kB (UE) 60*16kB (UMEH) 543*32kB (UMEH) 126*64kB (UME) 30*128kB (UM) 87*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53628kB
[ 1836.996432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1837.005532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1837.014137] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1837.023061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1837.032594] 310 total pagecache pages
[ 1837.036480] 0 pages in swap cache
[ 1837.039926] Swap cache stats: add 0, delete 0, find 0/0
[ 1837.045412] Free swap  = 0kB
[ 1837.048435] Total swap = 0kB
[ 1837.051482] 1965979 pages RAM
[ 1837.054592] 0 pages HighMem/MovableOnly
[ 1837.058554] 339048 pages reserved
[ 1837.062072] 0 pages cma reserved
[ 1837.065943] Out of memory: Kill process 26309 (syz-executor.2) score 1007 or sacrifice child
[ 1837.074760] Killed process 26309 (syz-executor.2) total-vm:75228kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB
[ 1837.229780] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=1000
[ 1837.294488] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[ 1837.300611] CPU: 0 PID: 11985 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[ 1837.308640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1837.318030] Call Trace:
[ 1837.320634]  dump_stack+0x13e/0x194
[ 1837.324260]  dump_header+0x178/0x6d4
[ 1837.328000]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1837.333080]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1837.338185]  ? ___ratelimit+0x50/0x519
[ 1837.342102]  oom_kill_process.cold+0x10/0xae3
[ 1837.346602]  ? lock_downgrade+0x6e0/0x6e0
[ 1837.350761]  out_of_memory+0x2d5/0x1110
[ 1837.354740]  ? oom_killer_disable+0x1c0/0x1c0
[ 1837.359253]  ? mutex_trylock+0x152/0x1a0
[ 1837.363356]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1837.368195]  ? warn_alloc+0xf0/0xf0
[ 1837.371837]  __alloc_pages_nodemask+0x5d3/0x700
[ 1837.376520]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1837.381579]  ? save_trace+0x290/0x290
[ 1837.385403]  alloc_pages_vma+0xc2/0x4a0
[ 1837.389376]  wp_page_copy+0xa22/0x1300
[ 1837.393254]  ? follow_pfn+0x200/0x200
[ 1837.397043]  do_wp_page+0x244/0x11d0
[ 1837.400767]  ? lock_acquire+0x170/0x3f0
[ 1837.404789]  ? finish_mkwrite_fault+0x640/0x640
[ 1837.409473]  __handle_mm_fault+0x1c0e/0x3280
[ 1837.413934]  ? copy_page_range+0x1d70/0x1d70
[ 1837.418336]  ? find_held_lock+0x2d/0x110
[ 1837.422386]  handle_mm_fault+0x288/0x7a0
[ 1837.426450]  __do_page_fault+0x4bc/0xb40
[ 1837.430520]  ? vmalloc_fault+0xdf0/0xdf0
[ 1837.434578]  ? do_page_fault+0x60/0x4f2
[ 1837.438668]  page_fault+0x25/0x50
[ 1837.442135] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[ 1837.448014] RSP: 0000:ffff8881c35afb60 EFLAGS: 00010206
[ 1837.453371] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500
[ 1837.460792] RDX: 0000000000001000 RSI: ffff888206dd0b00 RDI: 0000000020a49000
[ 1837.468067] RBP: 0000000020a48500 R08: ffffed1040dba200 R09: 0000000000000000
[ 1837.475376] R10: ffffed1040dba1ff R11: ffff888206dd0fff R12: ffff888206dd0000
[ 1837.482642] R13: 00007ffffffff000 R14: 0000000020a49500 R15: ffff8881c35afde0
[ 1837.489980]  copyout+0x99/0xc0
[ 1837.493171]  copy_page_to_iter+0x32a/0xc80
[ 1837.497410]  pipe_to_user+0xa8/0x160
[ 1837.501416]  __splice_from_pipe+0x332/0x740
[ 1837.505744]  ? iter_to_pipe+0x4c0/0x4c0
[ 1837.509706]  vmsplice_to_user+0x197/0x1c0
[ 1837.513847]  ? __splice_from_pipe+0x740/0x740
[ 1837.518326]  ? save_trace+0x290/0x290
[ 1837.522380]  ? __might_fault+0x104/0x1b0
[ 1837.526440]  ? find_held_lock+0x2d/0x110
[ 1837.530502]  ? lock_downgrade+0x6e0/0x6e0
[ 1837.534693]  ? __fget+0x228/0x360
[ 1837.538145]  SyS_vmsplice+0x12a/0x150
[ 1837.541934]  ? default_file_splice_write+0x80/0x80
[ 1837.546858]  do_syscall_64+0x1d5/0x640
[ 1837.550751]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1837.555938] RIP: 0033:0x45c449
[ 1837.559165] RSP: 002b:00007f281da2bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[ 1837.566969] RAX: ffffffffffffffda RBX: 00007f281da2c6d4 RCX: 000000000045c449
[ 1837.574227] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004
[ 1837.581488] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000
[ 1837.588766] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1837.596025] R13: 0000000000000c45 R14: 00000000004ce24e R15: 000000000076bfcc
[ 1837.614337] Mem-Info:
[ 1837.618310] active_anon:1316507 inactive_anon:201 isolated_anon:0
[ 1837.618310]  active_file:17 inactive_file:85 isolated_file:32
[ 1837.618310]  unevictable:0 dirty:0 writeback:8 unstable:0
[ 1837.618310]  slab_reclaimable:18526 slab_unreclaimable:120626
[ 1837.618310]  mapped:52236 shmem:253 pagetables:31560 bounce:0
[ 1837.618310]  free:27208 free_pcp:70 free_cma:0
[ 1837.709616] Node 0 active_anon:1916392kB inactive_anon:768kB active_file:960kB inactive_file:1032kB unevictable:0kB isolated(anon):0kB isolated(file):172kB mapped:187616kB dirty:0kB writeback:24kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 753664kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1837.768408] Node 1 active_anon:3349636kB inactive_anon:36kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22928kB dirty:0kB writeback:8kB shmem:40kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1837.824901] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4104kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1837.890092] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1837.895182] Node 0 DMA32 free:42420kB min:36272kB low:45340kB high:54408kB active_anon:1912288kB inactive_anon:768kB active_file:564kB inactive_file:656kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12096kB pagetables:40388kB bounce:0kB free_pcp:712kB local_pcp:64kB free_cma:0kB
[ 1837.960102] lowmem_reserve[]: 0 0 0 0 0
[ 1837.964154] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1838.020145] lowmem_reserve[]: 0 0 0 0 0
[ 1838.024203] Node 1 Normal free:54472kB min:53612kB low:67012kB high:80412kB active_anon:3349636kB inactive_anon:36kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:8kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30400kB pagetables:85828kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB
[ 1838.080091] lowmem_reserve[]: 0 0 0 0 0
[ 1838.084290] Node 0 DMA: 12*4kB (EH) 68*8kB (UMEH) 36*16kB (UMH) 12*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10384kB
[ 1838.130088] Node 0 DMA32: 170*4kB (UM) 1333*8kB (UME) 587*16kB (UME) 196*32kB (UM) 5*64kB (ME) 0*128kB 2*256kB (ME) 1*512kB (E) 1*1024kB (E) 3*2048kB (M) 2*4096kB (M) = 43712kB
[ 1838.170973] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1838.186024] Node 1 Normal: 161*4kB (UMH) 163*8kB (UME) 65*16kB (UMEH) 548*32kB (UMEH) 126*64kB (UME) 30*128kB (UM) 87*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54700kB
[ 1838.205698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1838.215068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1838.224166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1838.233829] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1838.243122] 387 total pagecache pages
[ 1838.247864] 0 pages in swap cache
[ 1838.251989] Swap cache stats: add 0, delete 0, find 0/0
[ 1838.258137] Free swap  = 0kB
[ 1838.261978] Total swap = 0kB
[ 1838.265415] 1965979 pages RAM
[ 1838.269180] 0 pages HighMem/MovableOnly
[ 1838.279185] 339048 pages reserved
[ 1838.283518] 0 pages cma reserved
[ 1838.288095] Out of memory: Kill process 30990 (syz-executor.2) score 1007 or sacrifice child
[ 1838.305134] Killed process 30990 (syz-executor.2) total-vm:75228kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB
[ 1838.338850] oom_reaper: reaped process 30990 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
03:37:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x127}], 0x3)

03:37:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x1ba}], 0x3)

03:37:11 executing program 2:
mkdir(&(0x7f0000001340)='./file0\x00', 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180))
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='[c:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
tkill(r0, 0x1002000000013)

03:37:11 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:12 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afca42eb537d619e2375c4a828dc1ef726e69ed7cb4ce897006de0ba53564ebc41ee4f598786fc2df7d6f90bde8b084955dec", 0x127}], 0x3)

[ 1840.444401] libceph: resolve 'c' (ret=-3): failed
[ 1840.444407] libceph: parse_ips bad ip '[c'
03:37:13 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:14 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1840.947358] input: syz1 as /devices/virtual/input/input154
[ 1840.972051] input: syz1 as /devices/virtual/input/input155
03:37:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x127}], 0x3)

03:37:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x127}], 0x3)

03:37:14 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:14 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[ 1842.321969] input: syz1 as /devices/virtual/input/input156
[ 1842.342373] input: syz1 as /devices/virtual/input/input157
03:37:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x1ba}], 0x3)

03:37:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x127}], 0x3)

03:37:15 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:15 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:15 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1842.895869] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1842.895886] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[ 1842.895908] CPU: 1 PID: 7683 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0
[ 1842.895912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1842.895915] Call Trace:
[ 1842.895936]  dump_stack+0x13e/0x194
[ 1842.895952]  dump_header+0x178/0x6d4
03:37:16 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1842.895964]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1842.895974]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1842.895982]  ? ___ratelimit+0x50/0x519
[ 1842.895993]  oom_kill_process.cold+0x10/0xae3
[ 1842.896004]  ? lock_downgrade+0x6e0/0x6e0
[ 1842.896015]  out_of_memory+0x2d5/0x1110
[ 1842.896113]  ? oom_killer_disable+0x1c0/0x1c0
[ 1842.896124]  ? mutex_trylock+0x152/0x1a0
03:37:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x127}], 0x3)

[ 1842.896136]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1842.896157]  ? warn_alloc+0xf0/0xf0
[ 1842.896166]  ? find_held_lock+0x2d/0x110
[ 1842.896173]  ? fs_reclaim_acquire+0x10/0x10
[ 1842.896191]  __alloc_pages_nodemask+0x5d3/0x700
[ 1842.896202]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1842.896208]  ? find_held_lock+0x2d/0x110
03:37:16 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1842.896223]  ? cache_grow_begin+0x32d/0x410
[ 1842.896233]  cache_grow_begin+0x7b/0x410
[ 1842.896243]  ? __cpuset_node_allowed+0xfa/0x450
[ 1842.896252]  fallback_alloc+0x205/0x2b0
[ 1842.896265]  kmem_cache_alloc+0x1ea/0x770
[ 1842.896275]  ? find_held_lock+0x2d/0x110
[ 1842.896286]  getname_flags+0xc8/0x560
[ 1842.896298]  user_path_mountpoint_at+0x23/0x40
[ 1842.896309]  SyS_umount+0x10a/0x340
[ 1842.896317]  ? __detach_mounts+0x2e0/0x2e0
[ 1842.896324]  ? __do_page_fault+0x35b/0xb40
[ 1842.896336]  ? do_syscall_64+0x4c/0x640
[ 1842.896343]  ? __detach_mounts+0x2e0/0x2e0
[ 1842.896351]  do_syscall_64+0x1d5/0x640
[ 1842.896364]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1842.896373] RIP: 0033:0x45ee77
[ 1842.896378] RSP: 002b:00007ffd9c700b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1842.896387] RAX: ffffffffffffffda RBX: 00000000001c194b RCX: 000000000045ee77
[ 1842.896391] RDX: 000000000000000c RSI: 0000000000000002 RDI: 00007ffd9c701c80
[ 1842.896396] RBP: 0000000000002329 R08: 0000000000000001 R09: 00000000017b5940
[ 1842.896401] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9c701c80
[ 1842.896406] R13: 00007ffd9c701c70 R14: 0000000000000000 R15: 00007ffd9c701c80
[ 1842.896419] Mem-Info:
[ 1842.896439] active_anon:1317685 inactive_anon:201 isolated_anon:0
[ 1842.896439]  active_file:324 inactive_file:337 isolated_file:4
[ 1842.896439]  unevictable:0 dirty:24 writeback:29 unstable:0
[ 1842.896439]  slab_reclaimable:18585 slab_unreclaimable:120399
[ 1842.896439]  mapped:52846 shmem:253 pagetables:31637 bounce:0
[ 1842.896439]  free:25336 free_pcp:28 free_cma:0
[ 1842.896453] Node 0 active_anon:1919168kB inactive_anon:796kB active_file:1368kB inactive_file:1408kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:188512kB dirty:92kB writeback:104kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 745472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1842.896467] Node 1 active_anon:3351572kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22872kB dirty:4kB writeback:12kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1842.896470] Node 0 DMA free:10384kB min:220kB low:272kB high:324kB active_anon:4104kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1842.896487] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1842.896504] Node 0 DMA32 free:37376kB min:36272kB low:45340kB high:54408kB active_anon:1914480kB inactive_anon:796kB active_file:2052kB inactive_file:1860kB unevictable:0kB writepending:296kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12192kB pagetables:40712kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB
[ 1842.896522] lowmem_reserve[]: 0 0 0 0 0
[ 1842.896539] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1842.896554] lowmem_reserve[]: 0 0 0 0 0
[ 1842.896571] Node 1 Normal free:53584kB min:53612kB low:67012kB high:80412kB active_anon:3351572kB inactive_anon:8kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30592kB pagetables:85812kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1842.896588] lowmem_reserve[]: 0 0 0 0 0
[ 1842.896605] Node 0 DMA: 12*4kB (EH) 68*8kB (UMEH) 36*16kB (UMH) 12*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10384kB
[ 1842.898967] Node 0 DMA32: 282*4kB (UME) 1420*8kB (UM) 735*16kB (UME) 235*32kB (UME) 8*64kB (M) 3*128kB (ME) 4*256kB (M) 4*512kB (ME) 2*1024kB (ME) 0*2048kB 0*4096kB = 37784kB
[ 1842.899043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1842.899082] Node 1 Normal: 58*4kB (UMH) 267*8kB (UME) 33*16kB (UMEH) 520*32kB (UMEH) 128*64kB (UME) 30*128kB (UM) 87*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53840kB
[ 1842.899143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1842.899148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1842.899153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1842.899158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1842.899161] 976 total pagecache pages
[ 1842.899171] 0 pages in swap cache
[ 1842.899175] Swap cache stats: add 0, delete 0, find 0/0
[ 1842.899177] Free swap  = 0kB
[ 1842.899180] Total swap = 0kB
[ 1842.899186] 1965979 pages RAM
[ 1842.899188] 0 pages HighMem/MovableOnly
[ 1842.899191] 339048 pages reserved
[ 1842.899194] 0 pages cma reserved
[ 1842.899200] Out of memory: Kill process 31080 (syz-executor.2) score 1007 or sacrifice child
[ 1842.899239] Killed process 31080 (syz-executor.2) total-vm:75228kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB
[ 1843.428087] input: syz1 as /devices/virtual/input/input158
[ 1843.559387] input: syz1 as /devices/virtual/input/input159
03:37:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x127}], 0x3)

03:37:19 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afca42eb537d619e2375c4a828dc1ef726e69ed7cb4ce897006de0ba53564ebc41ee4f598786fc2df7d6f90bde8b084955dec", 0x127}], 0x3)

03:37:19 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1847.452363] input: syz1 as /devices/virtual/input/input160
[ 1847.475045] input: syz1 as /devices/virtual/input/input161
[ 1849.842796] input: syz1 as /devices/virtual/input/input162
[ 1850.248034] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[ 1850.259925] blkid cpuset=/ mems_allowed=0-1
[ 1850.266245] CPU: 1 PID: 12120 Comm: blkid Not tainted 4.14.171-syzkaller #0
[ 1850.273373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1850.282837] Call Trace:
[ 1850.285548]  dump_stack+0x13e/0x194
[ 1850.289181]  dump_header+0x178/0x6d4
[ 1850.293022]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1850.298044]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1850.303193]  ? ___ratelimit+0x50/0x519
[ 1850.307220]  oom_kill_process.cold+0x10/0xae3
[ 1850.311777]  ? lock_acquire+0x170/0x3f0
[ 1850.315913]  ? lock_downgrade+0x6e0/0x6e0
[ 1850.320068]  out_of_memory+0x2d5/0x1110
[ 1850.324120]  ? oom_killer_disable+0x1c0/0x1c0
[ 1850.328613]  ? mutex_trylock+0x152/0x1a0
[ 1850.332670]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1850.337522]  ? warn_alloc+0xf0/0xf0
[ 1850.341281]  __alloc_pages_nodemask+0x5d3/0x700
[ 1850.345952]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1850.350988]  ? find_held_lock+0x2d/0x110
[ 1850.355054]  ? mark_held_locks+0xa6/0xf0
[ 1850.359114]  ? cache_grow_begin+0x32d/0x410
[ 1850.363435]  cache_grow_begin+0x7b/0x410
[ 1850.367500]  ? __cpuset_node_allowed+0xfa/0x450
[ 1850.372188]  fallback_alloc+0x205/0x2b0
[ 1850.376168]  kmem_cache_alloc+0x1ea/0x770
[ 1850.380318]  ima_d_path+0x4d/0x1d3
[ 1850.383863]  process_measurement+0x904/0xb20
[ 1850.388273]  ? ima_rdwr_violation_check+0x3a0/0x3a0
[ 1850.393285]  ? generic_file_open+0x68/0x90
[ 1850.397636]  ? ext4_release_file+0x2d0/0x2d0
[ 1850.402042]  ? inode_has_perm.isra.0+0x1d0/0x1d0
[ 1850.406787]  ? lock_downgrade+0x6e0/0x6e0
[ 1850.411146]  ? file_ra_state_init+0xc4/0x1e0
[ 1850.415545]  ? do_dentry_open+0x442/0xe90
[ 1850.419683]  ? ext4_release_file+0x2d0/0x2d0
[ 1850.424159]  ? __inode_permission+0x7c/0x300
[ 1850.428609]  ? vfs_open+0x10d/0x220
[ 1850.432334]  path_openat+0x15ad/0x3c50
[ 1850.436233]  ? path_lookupat.isra.0+0x7b0/0x7b0
[ 1850.440896]  do_filp_open+0x18e/0x250
[ 1850.444722]  ? may_open_dev+0xe0/0xe0
[ 1850.448519]  ? lock_downgrade+0x6e0/0x6e0
[ 1850.452713]  ? do_raw_spin_unlock+0x164/0x250
[ 1850.457302]  ? __alloc_fd+0x1bf/0x490
[ 1850.461153]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1850.466162]  do_sys_open+0x29d/0x3f0
[ 1850.469889]  ? filp_open+0x60/0x60
[ 1850.473446]  ? __do_page_fault+0x35b/0xb40
[ 1850.477788]  ? do_syscall_64+0x4c/0x640
[ 1850.481751]  ? do_sys_open+0x3f0/0x3f0
[ 1850.485635]  do_syscall_64+0x1d5/0x640
[ 1850.489668]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1850.494869] RIP: 0033:0x7f37fe8691a7
[ 1850.498572] RSP: 002b:00007fff51e92ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1850.506277] RAX: ffffffffffffffda RBX: 00007f37fea714c8 RCX: 00007f37fe8691a7
[ 1850.513535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f37fea6d629
[ 1850.520898] RBP: 00007fff51e92d60 R08: 00007fff51e9315f R09: 0000000000000000
[ 1850.528163] R10: 00007f37fea6d629 R11: 0000000000000246 R12: 0000000000000008
[ 1850.535422] R13: 00007f37fea73040 R14: 0000000000000000 R15: 00007fff51e9315f
[ 1850.577037] Mem-Info:
[ 1850.579516] active_anon:1320947 inactive_anon:198 isolated_anon:0
[ 1850.579516]  active_file:25 inactive_file:0 isolated_file:0
[ 1850.579516]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1850.579516]  slab_reclaimable:18748 slab_unreclaimable:119877
[ 1850.579516]  mapped:52226 shmem:252 pagetables:31684 bounce:0
[ 1850.579516]  free:23038 free_pcp:0 free_cma:0
[ 1850.613621] Node 0 active_anon:1931568kB inactive_anon:768kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 745472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1850.644345] Node 1 active_anon:3352268kB inactive_anon:24kB active_file:184kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:22896kB dirty:0kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1850.673818] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4104kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1850.701617] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1850.706692] Node 0 DMA32 free:28240kB min:36272kB low:45340kB high:54408kB active_anon:1927464kB inactive_anon:768kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12224kB pagetables:40480kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1850.738080] lowmem_reserve[]: 0 0 0 0 0
[ 1850.748395] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1850.778316] lowmem_reserve[]: 0 0 0 0 0
[ 1850.782564] Node 1 Normal free:53000kB min:53612kB low:67012kB high:80412kB active_anon:3352272kB inactive_anon:24kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30528kB pagetables:86232kB bounce:0kB free_pcp:740kB local_pcp:0kB free_cma:0kB
[ 1850.813768] lowmem_reserve[]: 0 0 0 0 0
[ 1850.817789] Node 0 DMA: 12*4kB (EH) 69*8kB (UMEH) 36*16kB (UMH) 12*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10392kB
[ 1850.854311] Node 0 DMA32: 208*4kB (UM) 1198*8kB (UME) 578*16kB (UME) 186*32kB (UME) 1*64kB (M) 0*128kB 2*256kB (ME) 0*512kB 2*1024kB (ME) 0*2048kB 0*4096kB = 28240kB
[ 1850.873943] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1850.909550] Node 1 Normal: 148*4kB (UMEH) 462*8kB (UMEH) 20*16kB (UMEH) 425*32kB (UMEH) 145*64kB (UME) 33*128kB (UME) 86*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53728kB
[ 1850.925867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1850.934807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1850.943461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1850.952530] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1850.961880] 292 total pagecache pages
[ 1850.965694] 0 pages in swap cache
[ 1850.969147] Swap cache stats: add 0, delete 0, find 0/0
[ 1850.974586] Free swap  = 0kB
[ 1850.977674] Total swap = 0kB
[ 1850.980941] 1965979 pages RAM
[ 1850.984046] 0 pages HighMem/MovableOnly
[ 1850.988072] 339048 pages reserved
[ 1850.991556] 0 pages cma reserved
[ 1850.994924] Out of memory: Kill process 31624 (syz-executor.2) score 1007 or sacrifice child
[ 1851.003598] Killed process 31624 (syz-executor.2) total-vm:75228kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB
[ 1851.097380] oom_reaper: reaped process 31624 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1851.188334] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[ 1851.225302] blkid cpuset=/ mems_allowed=0-1
[ 1851.229718] CPU: 1 PID: 12120 Comm: blkid Not tainted 4.14.171-syzkaller #0
[ 1851.236828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1851.246193] Call Trace:
[ 1851.248808]  dump_stack+0x13e/0x194
[ 1851.252454]  dump_header+0x178/0x6d4
[ 1851.256165]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1851.261183]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1851.266313]  ? ___ratelimit+0x50/0x519
[ 1851.270203]  oom_kill_process.cold+0x10/0xae3
[ 1851.274705]  ? lock_acquire+0x170/0x3f0
[ 1851.278665]  ? lock_downgrade+0x6e0/0x6e0
[ 1851.282815]  out_of_memory+0x2d5/0x1110
[ 1851.286791]  ? oom_killer_disable+0x1c0/0x1c0
[ 1851.291279]  ? mutex_trylock+0x152/0x1a0
[ 1851.295387]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1851.300240]  ? warn_alloc+0xf0/0xf0
[ 1851.303876]  __alloc_pages_nodemask+0x5d3/0x700
[ 1851.308547]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1851.313565]  ? find_held_lock+0x2d/0x110
[ 1851.317635]  ? mark_held_locks+0xa6/0xf0
[ 1851.321696]  ? cache_grow_begin+0x32d/0x410
[ 1851.326016]  cache_grow_begin+0x7b/0x410
[ 1851.330073]  ? __cpuset_node_allowed+0xfa/0x450
[ 1851.334754]  fallback_alloc+0x205/0x2b0
[ 1851.338739]  kmem_cache_alloc+0x1ea/0x770
[ 1851.342940]  ima_d_path+0x4d/0x1d3
[ 1851.346712]  process_measurement+0x904/0xb20
[ 1851.351126]  ? ima_rdwr_violation_check+0x3a0/0x3a0
[ 1851.356148]  ? generic_file_open+0x68/0x90
[ 1851.360378]  ? ext4_release_file+0x2d0/0x2d0
[ 1851.364792]  ? inode_has_perm.isra.0+0x1d0/0x1d0
[ 1851.369594]  ? lock_downgrade+0x6e0/0x6e0
[ 1851.373788]  ? file_ra_state_init+0xc4/0x1e0
[ 1851.378226]  ? do_dentry_open+0x442/0xe90
[ 1851.382367]  ? ext4_release_file+0x2d0/0x2d0
[ 1851.386772]  ? __inode_permission+0x7c/0x300
[ 1851.391185]  ? vfs_open+0x10d/0x220
[ 1851.394798]  path_openat+0x15ad/0x3c50
[ 1851.398691]  ? path_lookupat.isra.0+0x7b0/0x7b0
[ 1851.403362]  do_filp_open+0x18e/0x250
[ 1851.407149]  ? may_open_dev+0xe0/0xe0
[ 1851.410952]  ? lock_downgrade+0x6e0/0x6e0
[ 1851.415090]  ? do_raw_spin_unlock+0x164/0x250
[ 1851.419575]  ? __alloc_fd+0x1bf/0x490
[ 1851.423375]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1851.428394]  do_sys_open+0x29d/0x3f0
[ 1851.432106]  ? filp_open+0x60/0x60
[ 1851.435644]  ? __do_page_fault+0x35b/0xb40
[ 1851.439878]  ? do_syscall_64+0x4c/0x640
[ 1851.443842]  ? do_sys_open+0x3f0/0x3f0
[ 1851.447712]  do_syscall_64+0x1d5/0x640
[ 1851.451592]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1851.456768] RIP: 0033:0x7f37fe8691a7
[ 1851.460462] RSP: 002b:00007fff51e92ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1851.468164] RAX: ffffffffffffffda RBX: 00007f37fea714c8 RCX: 00007f37fe8691a7
[ 1851.475744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f37fea6d629
[ 1851.483017] RBP: 00007fff51e92d60 R08: 00007fff51e9315f R09: 0000000000000000
[ 1851.490272] R10: 00007f37fea6d629 R11: 0000000000000246 R12: 0000000000000008
[ 1851.498045] R13: 00007f37fea73040 R14: 0000000000000000 R15: 00007fff51e9315f
[ 1851.510364] Mem-Info:
[ 1851.512811] active_anon:1318473 inactive_anon:198 isolated_anon:0
[ 1851.512811]  active_file:35 inactive_file:13 isolated_file:0
[ 1851.512811]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1851.512811]  slab_reclaimable:18750 slab_unreclaimable:119896
[ 1851.512811]  mapped:52254 shmem:252 pagetables:31684 bounce:0
[ 1851.512811]  free:25227 free_pcp:317 free_cma:0
[ 1851.546330] Node 0 active_anon:1921832kB inactive_anon:768kB active_file:188kB inactive_file:944kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:186576kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 745472kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1851.574465] Node 1 active_anon:3352060kB inactive_anon:24kB active_file:52kB inactive_file:448kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:23240kB dirty:0kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1851.602170] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4104kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1851.628863] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1851.633985] Node 0 DMA32 free:35676kB min:36272kB low:45340kB high:54408kB active_anon:1917676kB inactive_anon:768kB active_file:0kB inactive_file:508kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12224kB pagetables:40480kB bounce:0kB free_pcp:720kB local_pcp:0kB free_cma:0kB
[ 1851.663596] lowmem_reserve[]: 0 0 0 0 0
[ 1851.667613] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1851.693525] lowmem_reserve[]: 0 0 0 0 0
[ 1851.697541] Node 1 Normal free:54012kB min:53612kB low:67012kB high:80412kB active_anon:3352012kB inactive_anon:24kB active_file:0kB inactive_file:292kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30528kB pagetables:86232kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1851.726602] lowmem_reserve[]: 0 0 0 0 0
[ 1851.730647] Node 0 DMA: 12*4kB (EH) 69*8kB (UMEH) 36*16kB (UMH) 12*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10392kB
[ 1851.746988] Node 0 DMA32: 97*4kB (UME) 1173*8kB (UME) 577*16kB (UME) 190*32kB (UME) 2*64kB (M) 0*128kB 1*256kB (E) 0*512kB 1*1024kB (E) 5*2048kB (M) 0*4096kB = 36732kB
[ 1851.762494] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1851.773290] Node 1 Normal: 160*4kB (UMEH) 476*8kB (UMEH) 43*16kB (UMEH) 430*32kB (UMEH) 145*64kB (UME) 33*128kB (UME) 86*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54416kB
[ 1851.789356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1851.799317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1851.807982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1851.816916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1851.825741] 358 total pagecache pages
[ 1851.829553] 0 pages in swap cache
[ 1851.833077] Swap cache stats: add 0, delete 0, find 0/0
[ 1851.838442] Free swap  = 0kB
[ 1851.841521] Total swap = 0kB
[ 1851.844553] 1965979 pages RAM
[ 1851.847835] 0 pages HighMem/MovableOnly
[ 1851.851863] 339048 pages reserved
[ 1851.855317] 0 pages cma reserved
[ 1851.858737] Out of memory: Kill process 32271 (syz-executor.1) score 1007 or sacrifice child
[ 1851.867455] Killed process 32271 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1851.961801] oom_reaper: reaped process 32271 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1852.015080] kdevtmpfs invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1852.027690] kdevtmpfs cpuset=/ mems_allowed=0-1
[ 1852.035143] CPU: 1 PID: 20 Comm: kdevtmpfs Not tainted 4.14.171-syzkaller #0
[ 1852.042357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1852.051705] Call Trace:
[ 1852.054375]  dump_stack+0x13e/0x194
[ 1852.058006]  dump_header+0x178/0x6d4
[ 1852.061716]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1852.066741]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1852.071835]  ? ___ratelimit+0x50/0x519
[ 1852.075738]  oom_kill_process.cold+0x10/0xae3
[ 1852.080284]  ? lock_downgrade+0x6e0/0x6e0
[ 1852.084437]  out_of_memory+0x2d5/0x1110
[ 1852.088425]  ? oom_killer_disable+0x1c0/0x1c0
[ 1852.092915]  ? mutex_trylock+0x152/0x1a0
[ 1852.097009]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1852.101864]  ? warn_alloc+0xf0/0xf0
[ 1852.105514]  ? find_held_lock+0x2d/0x110
[ 1852.109584]  ? fs_reclaim_acquire+0x10/0x10
[ 1852.113910]  __alloc_pages_nodemask+0x5d3/0x700
[ 1852.118574]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1852.123580]  ? find_held_lock+0x2d/0x110
[ 1852.127636]  ? cache_grow_begin+0x32d/0x410
[ 1852.131944]  cache_grow_begin+0x7b/0x410
[ 1852.136008]  ? __cpuset_node_allowed+0xfa/0x450
[ 1852.140662]  fallback_alloc+0x205/0x2b0
[ 1852.144623]  kmem_cache_alloc+0x1ea/0x770
[ 1852.148753]  ? __lock_is_held+0xad/0x140
[ 1852.152882]  ? save_trace+0x290/0x290
[ 1852.156667]  getname_kernel+0x4e/0x340
[ 1852.160539]  kern_path_locked+0x64/0x2b0
[ 1852.164580]  ? nd_jump_link+0x1d0/0x1d0
[ 1852.168560]  ? __lock_acquire+0x5f7/0x4620
[ 1852.172784]  handle_remove+0x95/0x670
[ 1852.176568]  ? cacheinfo_cpu_online.cold+0x2e/0x2e
[ 1852.181481]  ? trace_hardirqs_on+0x10/0x10
[ 1852.185712]  ? _raw_spin_unlock_irq+0x24/0x80
[ 1852.190193]  ? save_trace+0x290/0x290
[ 1852.194058]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 1852.198534]  ? finish_task_switch+0x178/0x620
[ 1852.203009]  ? finish_task_switch+0x14d/0x620
[ 1852.207501]  ? switch_mm_irqs_off+0x5db/0xec0
[ 1852.211984]  ? find_held_lock+0x2d/0x110
[ 1852.216025]  ? devtmpfsd+0x1fa/0x460
[ 1852.219723]  ? lock_acquire+0x170/0x3f0
[ 1852.223676]  ? lock_downgrade+0x6e0/0x6e0
[ 1852.227806]  devtmpfsd+0x326/0x460
[ 1852.231331]  ? handle_create+0x4c0/0x4c0
[ 1852.235370]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[ 1852.240468]  ? handle_create+0x4c0/0x4c0
[ 1852.244512]  kthread+0x30d/0x420
[ 1852.247947]  ? kthread_create_on_node+0xd0/0xd0
[ 1852.252610]  ret_from_fork+0x24/0x30
[ 1852.264315] Mem-Info:
[ 1852.269585] active_anon:1314356 inactive_anon:198 isolated_anon:0
[ 1852.269585]  active_file:23 inactive_file:38 isolated_file:0
[ 1852.269585]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1852.269585]  slab_reclaimable:18761 slab_unreclaimable:119923
[ 1852.269585]  mapped:52226 shmem:252 pagetables:31620 bounce:0
[ 1852.269585]  free:29640 free_pcp:100 free_cma:0
[ 1852.307900] Node 0 active_anon:1905384kB inactive_anon:768kB active_file:60kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:186092kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 716800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1852.336133] Node 1 active_anon:3352040kB inactive_anon:24kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22912kB dirty:0kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1852.363883] Node 0 DMA free:10392kB min:220kB low:272kB high:324kB active_anon:4104kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1852.403069] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1852.408464] Node 0 DMA32 free:52372kB min:36272kB low:45340kB high:54408kB active_anon:1901280kB inactive_anon:768kB active_file:60kB inactive_file:120kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12160kB pagetables:40328kB bounce:0kB free_pcp:1004kB local_pcp:292kB free_cma:0kB
[ 1852.440797] lowmem_reserve[]: 0 0 0 0 0
[ 1852.445245] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1852.471374] lowmem_reserve[]: 0 0 0 0 0
[ 1852.478963] Node 1 Normal free:54652kB min:53612kB low:67012kB high:80412kB active_anon:3352040kB inactive_anon:24kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30432kB pagetables:86128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1852.508321] lowmem_reserve[]: 0 0 0 0 0
[ 1852.512411] Node 0 DMA: 12*4kB (EH) 69*8kB (UMEH) 36*16kB (UMH) 12*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10392kB
[ 1852.530725] Node 0 DMA32: 227*4kB (UME) 1256*8kB (UME) 616*16kB (UME) 200*32kB (UME) 7*64kB (ME) 1*128kB (E) 1*256kB (M) 0*512kB 1*1024kB (E) 12*2048kB (M) 0*4096kB = 53644kB
[ 1852.549157] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1852.561048] Node 1 Normal: 219*4kB (UMEH) 476*8kB (UMEH) 43*16kB (UMEH) 430*32kB (UMEH) 145*64kB (UME) 33*128kB (UME) 86*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54652kB
[ 1852.577849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1852.587150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1852.596304] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1852.605586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1852.614771] 386 total pagecache pages
[ 1852.619048] 0 pages in swap cache
[ 1852.623048] Swap cache stats: add 0, delete 0, find 0/0
[ 1852.629308] Free swap  = 0kB
[ 1852.632393] Total swap = 0kB
[ 1852.635409] 1965979 pages RAM
[ 1852.638512] 0 pages HighMem/MovableOnly
[ 1852.643057] 339048 pages reserved
[ 1852.647212] 0 pages cma reserved
[ 1852.651059] Out of memory: Kill process 32620 (syz-executor.2) score 1007 or sacrifice child
[ 1852.661981] Killed process 32620 (syz-executor.2) total-vm:75228kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB
[ 1852.715746] oom_reaper: reaped process 32620 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
03:37:25 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d089562066", 0x9c}], 0x2)

03:37:25 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:25 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afca42eb537d619e2375c4a828dc1ef726e69ed7cb4ce897006de0ba53564ebc41ee4f598786fc2df7d6f90bde8b084955dec", 0x127}], 0x3)

03:37:26 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1853.341190] input: syz1 as /devices/virtual/input/input163
[ 1853.524206] input: syz1 as /devices/virtual/input/input164
03:37:27 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d089562066", 0x9c}], 0x2)

03:37:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x499}], 0x3)

03:37:27 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:27 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:27 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[ 1854.739817] input: syz1 as /devices/virtual/input/input165
03:37:27 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d089562066", 0x9c}], 0x2)

03:37:27 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:28 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:28 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1854.938269] input: syz1 as /devices/virtual/input/input166
03:37:28 executing program 4:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:29 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:29 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1855.965658] syz-executor.0 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=1000
[ 1855.965780] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[ 1855.965850] CPU: 0 PID: 12166 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[ 1855.965855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1855.965860] Call Trace:
[ 1855.965878]  dump_stack+0x13e/0x194
[ 1855.965894]  dump_header+0x178/0x6d4
[ 1855.965906]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1855.965916]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1855.965925]  ? ___ratelimit+0x50/0x519
[ 1855.965937]  oom_kill_process.cold+0x10/0xae3
[ 1855.965948]  ? lock_downgrade+0x6e0/0x6e0
[ 1855.965961]  out_of_memory+0x2d5/0x1110
[ 1855.965975]  ? oom_killer_disable+0x1c0/0x1c0
[ 1855.965985]  ? mutex_trylock+0x152/0x1a0
[ 1855.965997]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1855.966019]  ? warn_alloc+0xf0/0xf0
[ 1855.966039]  __alloc_pages_nodemask+0x5d3/0x700
[ 1855.966050]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1855.966058]  ? save_trace+0x290/0x290
[ 1855.966077]  alloc_pages_vma+0xc2/0x4a0
[ 1855.966089]  wp_page_copy+0xa22/0x1300
[ 1855.966103]  ? follow_pfn+0x200/0x200
[ 1855.966117]  do_wp_page+0x244/0x11d0
[ 1855.966125]  ? lock_acquire+0x170/0x3f0
[ 1855.966134]  ? finish_mkwrite_fault+0x640/0x640
[ 1855.966146]  __handle_mm_fault+0x1c0e/0x3280
[ 1855.966156]  ? copy_page_range+0x1d70/0x1d70
[ 1855.966166]  ? find_held_lock+0x2d/0x110
[ 1855.966187]  handle_mm_fault+0x288/0x7a0
[ 1855.966201]  __do_page_fault+0x4bc/0xb40
[ 1855.966214]  ? vmalloc_fault+0xdf0/0xdf0
[ 1855.966221]  ? do_page_fault+0x60/0x4f2
[ 1855.966231]  page_fault+0x25/0x50
[ 1855.966242] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[ 1855.966246] RSP: 0018:ffff88815bfd7b60 EFLAGS: 00010206
[ 1855.966255] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500
03:37:30 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1855.966261] RDX: 0000000000001000 RSI: ffff888218457b00 RDI: 0000000020f19000
[ 1855.966266] RBP: 0000000020f18500 R08: ffffed104308b000 R09: 0000000000000000
[ 1855.966272] R10: ffffed104308afff R11: ffff888218457fff R12: ffff888218457000
[ 1855.966278] R13: 00007ffffffff000 R14: 0000000020f19500 R15: ffff88815bfd7de0
[ 1855.966297]  copyout+0x99/0xc0
[ 1855.966307]  copy_page_to_iter+0x32a/0xc80
[ 1855.966324]  pipe_to_user+0xa8/0x160
[ 1855.966336]  __splice_from_pipe+0x332/0x740
[ 1855.966348]  ? iter_to_pipe+0x4c0/0x4c0
[ 1855.966366]  vmsplice_to_user+0x197/0x1c0
[ 1855.966376]  ? __splice_from_pipe+0x740/0x740
[ 1855.966384]  ? save_trace+0x290/0x290
[ 1855.966400]  ? __might_fault+0x104/0x1b0
[ 1855.966412]  ? find_held_lock+0x2d/0x110
[ 1855.966427]  ? lock_downgrade+0x6e0/0x6e0
[ 1855.966442]  ? __fget+0x228/0x360
[ 1855.966458]  SyS_vmsplice+0x12a/0x150
[ 1855.966467]  ? default_file_splice_write+0x80/0x80
[ 1855.966482]  do_syscall_64+0x1d5/0x640
[ 1855.966496]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1855.966503] RIP: 0033:0x45c449
[ 1855.966508] RSP: 002b:00007f281da2bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[ 1855.966518] RAX: ffffffffffffffda RBX: 00007f281da2c6d4 RCX: 000000000045c449
03:37:30 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1855.966523] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000004
[ 1855.966527] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000
[ 1855.966532] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1855.966538] R13: 0000000000000c45 R14: 00000000004ce24e R15: 000000000076bfcc
[ 1855.969061] Mem-Info:
[ 1855.969084] active_anon:1317872 inactive_anon:200 isolated_anon:0
[ 1855.969084]  active_file:639 inactive_file:628 isolated_file:47
[ 1855.969084]  unevictable:0 dirty:38 writeback:50 unstable:0
[ 1855.969084]  slab_reclaimable:18785 slab_unreclaimable:119840
[ 1855.969084]  mapped:53496 shmem:252 pagetables:31736 bounce:0
[ 1855.969084]  free:24744 free_pcp:16 free_cma:0
[ 1855.969100] Node 0 active_anon:1918004kB inactive_anon:768kB active_file:2372kB inactive_file:2296kB unevictable:0kB isolated(anon):0kB isolated(file):188kB mapped:190792kB dirty:92kB writeback:200kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 729088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1855.969115] Node 1 active_anon:3353484kB inactive_anon:32kB active_file:184kB inactive_file:216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23192kB dirty:60kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1855.969118] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4076kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1855.969136] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1855.969155] Node 0 DMA32 free:34988kB min:36272kB low:45340kB high:54408kB active_anon:1913864kB inactive_anon:768kB active_file:2664kB inactive_file:2672kB unevictable:0kB writepending:392kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12256kB pagetables:40408kB bounce:0kB free_pcp:64kB local_pcp:48kB free_cma:0kB
[ 1855.969175] lowmem_reserve[]: 0 0 0 0 0
[ 1855.969193] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1855.969211] lowmem_reserve[]: 0 0 0 0 0
[ 1855.969230] Node 1 Normal free:53600kB min:53612kB low:67012kB high:80412kB active_anon:3353092kB inactive_anon:32kB active_file:304kB inactive_file:272kB unevictable:0kB writepending:12kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30688kB pagetables:86512kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1855.969249] lowmem_reserve[]: 0 0 0 0 0
[ 1855.969267] Node 0 DMA: 15*4kB (MEH) 67*8kB (UMEH) 36*16kB (UMH) 12*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10388kB
[ 1855.969345] Node 0 DMA32: 718*4kB (UME) 1247*8kB (UME) 663*16kB (UME) 222*32kB (UME) 3*64kB (M) 18*128kB (M) 2*256kB (M) 1*512kB (M) 1*1024kB (E) 0*2048kB 0*4096kB = 35104kB
[ 1855.969424] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1855.969472] Node 1 Normal: 55*4kB (UMEH) 365*8kB (UMEH) 116*16kB (UMEH) 360*32kB (UMEH) 174*64kB (UME) 33*128kB (UME) 86*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53892kB
[ 1855.969542] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1855.969548] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1855.969554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1855.969560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1855.969564] 1572 total pagecache pages
[ 1855.969576] 0 pages in swap cache
[ 1855.969581] Swap cache stats: add 0, delete 0, find 0/0
[ 1855.969585] Free swap  = 0kB
[ 1855.969588] Total swap = 0kB
[ 1855.969594] 1965979 pages RAM
[ 1855.969597] 0 pages HighMem/MovableOnly
[ 1855.969600] 339048 pages reserved
[ 1855.969602] 0 pages cma reserved
[ 1855.969608] Out of memory: Kill process 12146 (syz-executor.1) score 1007 or sacrifice child
[ 1855.969644] Killed process 12146 (syz-executor.1) total-vm:75228kB, anon-rss:16564kB, file-rss:35820kB, shmem-rss:0kB
[ 1856.196199] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1856.196214] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 1856.196235] CPU: 1 PID: 12183 Comm: syz-executor.3 Not tainted 4.14.171-syzkaller #0
[ 1856.196239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1856.196242] Call Trace:
[ 1856.196260]  dump_stack+0x13e/0x194
[ 1856.196274]  dump_header+0x178/0x6d4
[ 1856.196285]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1856.196295]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1856.196302]  ? ___ratelimit+0x50/0x519
[ 1856.196312]  oom_kill_process.cold+0x10/0xae3
[ 1856.196322]  ? lock_downgrade+0x6e0/0x6e0
[ 1856.196334]  out_of_memory+0x2d5/0x1110
[ 1856.196346]  ? oom_killer_disable+0x1c0/0x1c0
[ 1856.196355]  ? mutex_trylock+0x152/0x1a0
[ 1856.196366]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1856.196386]  ? warn_alloc+0xf0/0xf0
[ 1856.196393]  ? find_held_lock+0x2d/0x110
[ 1856.196401]  ? fs_reclaim_acquire+0x10/0x10
[ 1856.196418]  __alloc_pages_nodemask+0x5d3/0x700
[ 1856.196428]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1856.196434]  ? find_held_lock+0x2d/0x110
[ 1856.196449]  ? cache_grow_begin+0x32d/0x410
[ 1856.196459]  cache_grow_begin+0x7b/0x410
[ 1856.196468]  ? __cpuset_node_allowed+0xfa/0x450
[ 1856.196477]  fallback_alloc+0x205/0x2b0
[ 1856.196489]  kmem_cache_alloc+0x1ea/0x770
[ 1856.196497]  ? find_held_lock+0x2d/0x110
[ 1856.196506]  ? __do_page_fault+0x4e4/0xb40
[ 1856.196517]  getname_flags+0xc8/0x560
[ 1856.196527]  user_path_at_empty+0x2a/0x50
[ 1856.196544]  SyS_chdir+0x79/0x190
[ 1856.196551]  ? SyS_access+0x680/0x680
[ 1856.196563]  ? do_syscall_64+0x4c/0x640
[ 1856.196569]  ? SyS_access+0x680/0x680
[ 1856.196577]  do_syscall_64+0x1d5/0x640
[ 1856.196589]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1856.196597] RIP: 0033:0x45ba37
[ 1856.196601] RSP: 002b:00007ffc6221f4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000050
[ 1856.196610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ba37
[ 1856.196615] RDX: 0000000000000001 RSI: 000000000071fe90 RDI: 00007ffc6221f520
[ 1856.196620] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000002486940
[ 1856.196625] R10: 0000000002486c10 R11: 0000000000000246 R12: 0000000000000000
[ 1856.196630] R13: 00007ffc6221f510 R14: 0000000000000000 R15: 00007ffc6221f520
[ 1856.196642] Mem-Info:
[ 1856.196661] active_anon:1313966 inactive_anon:201 isolated_anon:0
[ 1856.196661]  active_file:416 inactive_file:818 isolated_file:78
[ 1856.196661]  unevictable:0 dirty:23 writeback:1 unstable:0
[ 1856.196661]  slab_reclaimable:18782 slab_unreclaimable:119773
[ 1856.196661]  mapped:53225 shmem:252 pagetables:31697 bounce:0
[ 1856.196661]  free:28790 free_pcp:93 free_cma:0
[ 1856.196674] Node 0 active_anon:1902460kB inactive_anon:768kB active_file:1648kB inactive_file:3260kB unevictable:0kB isolated(anon):0kB isolated(file):312kB mapped:189984kB dirty:88kB writeback:4kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 714752kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1856.196686] Node 1 active_anon:3353404kB inactive_anon:36kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22916kB dirty:4kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1856.196688] Node 0 DMA free:10388kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1856.196705] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1856.196723] Node 0 DMA32 free:49840kB min:36272kB low:45340kB high:54408kB active_anon:1898368kB inactive_anon:768kB active_file:1684kB inactive_file:3844kB unevictable:0kB writepending:92kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12160kB pagetables:40196kB bounce:0kB free_pcp:372kB local_pcp:44kB free_cma:0kB
[ 1856.196741] lowmem_reserve[]: 0 0 0 0 0
[ 1856.196756] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1856.196771] lowmem_reserve[]: 0 0 0 0 0
[ 1856.196786] Node 1 Normal free:54932kB min:53612kB low:67012kB high:80412kB active_anon:3353404kB inactive_anon:36kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30624kB pagetables:86568kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1856.196803] lowmem_reserve[]: 0 0 0 0 0
[ 1856.196821] Node 0 DMA: 15*4kB (MEH) 67*8kB (UMEH) 36*16kB (UMH) 12*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10388kB
[ 1856.196895] Node 0 DMA32: 226*4kB (UME) 1326*8kB (UME) 697*16kB (UME) 249*32kB (UME) 11*64kB (M) 19*128kB (M) 2*256kB (M) 1*512kB (M) 1*1024kB (E) 7*2048kB (UM) 0*4096kB = 50152kB
[ 1856.196966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1856.197009] Node 1 Normal: 206*4kB (UMEH) 428*8kB (UMEH) 117*16kB (UMEH) 363*32kB (UMEH) 174*64kB (UME) 33*128kB (UME) 86*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55112kB
[ 1856.197077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1856.197083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1856.197093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1856.197099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1856.197103] 1572 total pagecache pages
[ 1856.197113] 0 pages in swap cache
[ 1856.197117] Swap cache stats: add 0, delete 0, find 0/0
[ 1856.197119] Free swap  = 0kB
[ 1856.197122] Total swap = 0kB
[ 1856.197127] 1965979 pages RAM
[ 1856.197130] 0 pages HighMem/MovableOnly
[ 1856.197133] 339048 pages reserved
[ 1856.197135] 0 pages cma reserved
[ 1856.197140] Out of memory: Kill process 644 (syz-executor.1) score 1007 or sacrifice child
[ 1856.197176] Killed process 644 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1856.695326] input: syz1 as /devices/virtual/input/input167
[ 1856.748773] input: syz1 as /devices/virtual/input/input168
[ 1857.436223] input: syz1 as /devices/virtual/input/input169
03:37:32 executing program 0:
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:32 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:32 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:32 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))

03:37:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x499}], 0x3)

03:37:32 executing program 4:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:33 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:33 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))

03:37:33 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:34 executing program 0:
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[ 1860.182352] input: syz1 as /devices/virtual/input/input170
03:37:34 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))

03:37:34 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1860.513766] input: syz1 as /devices/virtual/input/input171
[ 1861.544821] input: syz1 as /devices/virtual/input/input172
[ 1861.730526] input: syz1 as /devices/virtual/input/input173
03:37:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725", 0xba}], 0x2)

03:37:36 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:36 executing program 0:
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x499}], 0x3)

03:37:36 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:36 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:37 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:37 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:37 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1864.359593] input: syz1 as /devices/virtual/input/input174
[ 1864.825061] input: syz1 as /devices/virtual/input/input175
03:37:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725", 0xba}], 0x2)

03:37:40 executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:40 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1868.529901] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null),  order=0, oom_score_adj=0
[ 1868.577335] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 1868.589233] CPU: 0 PID: 11516 Comm: syz-fuzzer Not tainted 4.14.171-syzkaller #0
[ 1868.596801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1868.606187] Call Trace:
[ 1868.608786]  dump_stack+0x13e/0x194
[ 1868.612444]  dump_header+0x178/0x6d4
[ 1868.616156]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1868.621170]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1868.626272]  ? ___ratelimit+0x50/0x519
[ 1868.630146]  oom_kill_process.cold+0x10/0xae3
[ 1868.634739]  ? lock_downgrade+0x6e0/0x6e0
[ 1868.638888]  out_of_memory+0x2d5/0x1110
[ 1868.642848]  ? oom_killer_disable+0x1c0/0x1c0
[ 1868.647326]  ? mutex_trylock+0x152/0x1a0
[ 1868.651373]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1868.656212]  ? warn_alloc+0xf0/0xf0
[ 1868.659841]  __alloc_pages_nodemask+0x5d3/0x700
[ 1868.664494]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1868.669493]  ? lock_downgrade+0x6e0/0x6e0
[ 1868.673627]  alloc_pages_current+0xe7/0x1e0
[ 1868.678018]  __page_cache_alloc+0x245/0x3d0
[ 1868.682325]  filemap_fault+0xc21/0x1c30
[ 1868.686303]  ? __lock_page_or_retry+0x8a0/0x8a0
[ 1868.690955]  ? lock_acquire+0x170/0x3f0
[ 1868.694926]  ? ext4_filemap_fault+0x7c/0xb0
[ 1868.699234]  ext4_filemap_fault+0x84/0xb0
[ 1868.703364]  __do_fault+0xfa/0x380
[ 1868.706886]  __handle_mm_fault+0x22e9/0x3280
[ 1868.711277]  ? copy_page_range+0x1d70/0x1d70
[ 1868.715666]  ? find_held_lock+0x2d/0x110
[ 1868.719715]  handle_mm_fault+0x288/0x7a0
[ 1868.723939]  __do_page_fault+0x4bc/0xb40
[ 1868.727983]  ? vmalloc_fault+0xdf0/0xdf0
[ 1868.732025]  ? do_page_fault+0x60/0x4f2
[ 1868.735982]  ? page_fault+0x2f/0x50
[ 1868.739588]  page_fault+0x45/0x50
[ 1868.743023] RIP: 01b9:0x1b8
[ 1868.745932] RSP: 2f196c90:000000c4203cb6e0 EFLAGS: 00001500
[ 1868.775409] Mem-Info:
[ 1868.783951] active_anon:1322396 inactive_anon:197 isolated_anon:0
[ 1868.783951]  active_file:466 inactive_file:486 isolated_file:75
[ 1868.783951]  unevictable:0 dirty:13 writeback:0 unstable:0
[ 1868.783951]  slab_reclaimable:18828 slab_unreclaimable:120353
[ 1868.783951]  mapped:53108 shmem:250 pagetables:31771 bounce:0
[ 1868.783951]  free:19782 free_pcp:18 free_cma:0
[ 1868.822377] Node 0 active_anon:1929328kB inactive_anon:768kB active_file:44kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 729088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1868.856567] Node 1 active_anon:3360256kB inactive_anon:20kB active_file:1820kB inactive_file:1840kB unevictable:0kB isolated(anon):0kB isolated(file):300kB mapped:26240kB dirty:52kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1868.895798] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1868.927447] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1868.932562] Node 0 DMA32 free:27284kB min:36272kB low:45340kB high:54408kB active_anon:1925236kB inactive_anon:768kB active_file:44kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12256kB pagetables:40260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1868.966231] lowmem_reserve[]: 0 0 0 0 0
[ 1868.970501] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1869.000505] lowmem_reserve[]: 0 0 0 0 0
[ 1869.020793] Node 1 Normal free:42956kB min:53612kB low:67012kB high:80412kB active_anon:3359472kB inactive_anon:20kB active_file:1756kB inactive_file:1640kB unevictable:0kB writepending:52kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30624kB pagetables:86800kB bounce:0kB free_pcp:288kB local_pcp:152kB free_cma:0kB
[ 1869.093992] lowmem_reserve[]: 0 0 0 0 0
[ 1869.108244] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1869.150245] Node 0 DMA32: 65*4kB (UM) 836*8kB (UME) 547*16kB (UE) 188*32kB (UE) 15*64kB (ME) 20*128kB (ME) 4*256kB (ME) 2*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 27284kB
[ 1869.186114] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1869.217266] Node 1 Normal: 466*4kB (UME) 242*8kB (UMEH) 92*16kB (UME) 371*32kB (UMH) 96*64kB (UMEH) 12*128kB (UME) 72*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43256kB
[ 1869.249508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1869.269458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1869.287158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1869.306147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1869.335826] 596 total pagecache pages
[ 1869.344255] 0 pages in swap cache
[ 1869.352154] Swap cache stats: add 0, delete 0, find 0/0
[ 1869.363137] Free swap  = 0kB
[ 1869.369575] Total swap = 0kB
[ 1869.376118] 1965979 pages RAM
[ 1869.382780] 0 pages HighMem/MovableOnly
[ 1869.391210] 339048 pages reserved
[ 1869.398088] 0 pages cma reserved
[ 1869.404886] Out of memory: Kill process 12380 (syz-executor.3) score 1007 or sacrifice child
[ 1869.687902] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null),  order=0, oom_score_adj=0
[ 1869.703982] syz-fuzzer cpuset=/ mems_allowed=0-1
[ 1869.708786] CPU: 1 PID: 7663 Comm: syz-fuzzer Not tainted 4.14.171-syzkaller #0
[ 1869.716235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1869.725620] Call Trace:
[ 1869.728214]  dump_stack+0x13e/0x194
[ 1869.731846]  dump_header+0x178/0x6d4
[ 1869.735553]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1869.740675]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1869.745787]  ? ___ratelimit+0x50/0x519
[ 1869.749682]  oom_kill_process.cold+0x10/0xae3
[ 1869.754206]  ? lock_downgrade+0x6e0/0x6e0
[ 1869.758354]  out_of_memory+0x2d5/0x1110
[ 1869.762324]  ? oom_killer_disable+0x1c0/0x1c0
[ 1869.766806]  ? mutex_trylock+0x152/0x1a0
[ 1869.770854]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1869.775694]  ? warn_alloc+0xf0/0xf0
[ 1869.779313]  __alloc_pages_nodemask+0x5d3/0x700
[ 1869.783970]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1869.788980]  ? lock_downgrade+0x6e0/0x6e0
[ 1869.793118]  alloc_pages_current+0xe7/0x1e0
[ 1869.797425]  __page_cache_alloc+0x245/0x3d0
[ 1869.801730]  filemap_fault+0xc21/0x1c30
[ 1869.805692]  ? __lock_page_or_retry+0x8a0/0x8a0
[ 1869.810517]  ? lock_acquire+0x170/0x3f0
[ 1869.814561]  ? ext4_filemap_fault+0x7c/0xb0
[ 1869.818867]  ext4_filemap_fault+0x84/0xb0
[ 1869.822997]  __do_fault+0xfa/0x380
[ 1869.826517]  __handle_mm_fault+0x22e9/0x3280
[ 1869.830931]  ? copy_page_range+0x1d70/0x1d70
[ 1869.835322]  ? find_held_lock+0x2d/0x110
[ 1869.839373]  handle_mm_fault+0x288/0x7a0
[ 1869.843421]  __do_page_fault+0x4bc/0xb40
[ 1869.847467]  ? vmalloc_fault+0xdf0/0xdf0
[ 1869.851509]  ? do_page_fault+0x60/0x4f2
[ 1869.855480]  ? page_fault+0x2f/0x50
[ 1869.859087]  page_fault+0x45/0x50
[ 1869.862524] RIP: 00f1:0x11
[ 1869.865347] RSP: 000c:000000c42004ff18 EFLAGS: 0042f0a0
[ 1869.885339] Mem-Info:
[ 1869.905458] active_anon:1322437 inactive_anon:197 isolated_anon:0
[ 1869.905458]  active_file:10 inactive_file:1 isolated_file:0
[ 1869.905458]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1869.905458]  slab_reclaimable:18833 slab_unreclaimable:120372
[ 1869.905458]  mapped:52228 shmem:250 pagetables:31775 bounce:0
[ 1869.905458]  free:21045 free_pcp:0 free_cma:0
[ 1869.953719] Node 0 active_anon:1929384kB inactive_anon:768kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 729088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1869.988961] Node 1 active_anon:3360364kB inactive_anon:20kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22920kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1870.024320] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1870.060785] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1870.065858] Node 0 DMA32 free:27444kB min:36272kB low:45340kB high:54408kB active_anon:1925292kB inactive_anon:768kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12192kB pagetables:40260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1870.097093] lowmem_reserve[]: 0 0 0 0 0
[ 1870.101155] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1870.127595] lowmem_reserve[]: 0 0 0 0 0
[ 1870.131616] Node 1 Normal free:46408kB min:53612kB low:67012kB high:80412kB active_anon:3360364kB inactive_anon:20kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30560kB pagetables:86816kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1870.160973] lowmem_reserve[]: 0 0 0 0 0
[ 1870.164959] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1870.181234] Node 0 DMA32: 77*4kB (UME) 835*8kB (UME) 547*16kB (UE) 190*32kB (UME) 16*64kB (ME) 20*128kB (ME) 4*256kB (ME) 2*512kB (ME) 0*1024kB 0*2048kB 0*4096kB = 27452kB
[ 1870.196825] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1870.207630] Node 1 Normal: 758*4kB (UME) 290*8kB (UMEH) 162*16kB (UME) 384*32kB (UMH) 97*64kB (UMEH) 12*128kB (UME) 72*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46408kB
[ 1870.224927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1870.233854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1870.244199] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1870.253089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1870.263436] 280 total pagecache pages
[ 1870.267240] 0 pages in swap cache
[ 1870.270714] Swap cache stats: add 0, delete 0, find 0/0
[ 1870.276064] Free swap  = 0kB
[ 1870.279070] Total swap = 0kB
[ 1870.283907] 1965979 pages RAM
[ 1870.287011] 0 pages HighMem/MovableOnly
[ 1870.291647] 339048 pages reserved
[ 1870.295097] 0 pages cma reserved
[ 1870.298463] Out of memory: Kill process 678 (syz-executor.4) score 1007 or sacrifice child
[ 1870.308834] Killed process 678 (syz-executor.4) total-vm:75096kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB
[ 1870.449412] oom_reaper: reaped process 678 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1870.515539] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=3, oom_score_adj=0
[ 1870.574053] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[ 1870.607822] CPU: 1 PID: 7688 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[ 1870.615703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1870.625074] Call Trace:
[ 1870.627676]  dump_stack+0x13e/0x194
[ 1870.631327]  dump_header+0x178/0x6d4
[ 1870.635051]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1870.640179]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1870.645290]  ? ___ratelimit+0x50/0x519
[ 1870.649196]  oom_kill_process.cold+0x10/0xae3
[ 1870.653700]  ? lock_downgrade+0x6e0/0x6e0
[ 1870.657858]  out_of_memory+0x2d5/0x1110
[ 1870.661842]  ? oom_killer_disable+0x1c0/0x1c0
[ 1870.666449]  ? mutex_trylock+0x152/0x1a0
[ 1870.670516]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1870.675381]  ? warn_alloc+0xf0/0xf0
[ 1870.679016]  ? find_held_lock+0x2d/0x110
[ 1870.683199]  ? fs_reclaim_acquire+0x10/0x10
[ 1870.687540]  __alloc_pages_nodemask+0x5d3/0x700
[ 1870.692221]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1870.697241]  ? copy_process.part.0+0x17d5/0x6a70
[ 1870.702005]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1870.707030]  ? __lock_acquire+0x5f7/0x4620
[ 1870.711273]  copy_process.part.0+0x26a/0x6a70
[ 1870.715777]  ? trace_hardirqs_on+0x10/0x10
[ 1870.720019]  ? save_trace+0x290/0x290
[ 1870.723835]  ? find_held_lock+0x2d/0x110
[ 1870.727904]  ? __cleanup_sighand+0x40/0x40
[ 1870.732231]  ? lock_downgrade+0x6e0/0x6e0
[ 1870.736393]  _do_fork+0x180/0xc80
[ 1870.739863]  ? put_timespec64+0xaa/0xf0
[ 1870.743841]  ? fork_idle+0x270/0x270
[ 1870.747566]  ? SyS_clock_gettime+0xf5/0x180
[ 1870.751896]  ? SyS_clock_settime+0x1a0/0x1a0
[ 1870.756310]  ? do_syscall_64+0x4c/0x640
[ 1870.760294]  ? sys_vfork+0x20/0x20
[ 1870.763842]  do_syscall_64+0x1d5/0x640
[ 1870.767743]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1870.772939] RIP: 0033:0x45aa1a
[ 1870.776131] RSP: 002b:00007ffc2a0d1cb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1870.783835] RAX: ffffffffffffffda RBX: 00007ffc2a0d1cb0 RCX: 000000000045aa1a
[ 1870.791229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1870.798507] RBP: 00007ffc2a0d1cf0 R08: 0000000000000001 R09: 000000000284d940
[ 1870.805782] R10: 000000000284dc10 R11: 0000000000000246 R12: 0000000000000001
[ 1870.813060] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc2a0d1d40
[ 1870.828620] Mem-Info:
[ 1870.831176] active_anon:1318314 inactive_anon:197 isolated_anon:0
[ 1870.831176]  active_file:95 inactive_file:106 isolated_file:32
[ 1870.831176]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1870.831176]  slab_reclaimable:18833 slab_unreclaimable:120101
[ 1870.831176]  mapped:52351 shmem:250 pagetables:31775 bounce:0
[ 1870.831176]  free:24928 free_pcp:112 free_cma:0
[ 1870.868927] Node 0 active_anon:1912892kB inactive_anon:768kB active_file:152kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186092kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 729088kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1870.896825] Node 1 active_anon:3360364kB inactive_anon:20kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22912kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
03:37:43 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1870.923987] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1870.965854] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1870.971085] Node 0 DMA32 free:42092kB min:36272kB low:45340kB high:54408kB active_anon:1908800kB inactive_anon:768kB active_file:0kB inactive_file:732kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12192kB pagetables:40260kB bounce:0kB free_pcp:1008kB local_pcp:644kB free_cma:0kB
[ 1871.001310] lowmem_reserve[]: 0 0 0 0 0
[ 1871.005389] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1871.036093] lowmem_reserve[]: 0 0 0 0 0
[ 1871.040305] Node 1 Normal free:47744kB min:53612kB low:67012kB high:80412kB active_anon:3360364kB inactive_anon:20kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30560kB pagetables:86816kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1871.071363] lowmem_reserve[]: 0 0 0 0 0
[ 1871.075453] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1871.119763] Node 0 DMA32: 51*4kB (UME) 936*8kB (UME) 563*16kB (UME) 195*32kB (UM) 16*64kB (ME) 19*128kB (ME) 3*256kB (ME) 2*512kB (ME) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 42524kB
[ 1871.143607] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1871.154517] Node 1 Normal: 760*4kB (UME) 319*8kB (UMEH) 226*16kB (UMEH) 388*32kB (UMH) 97*64kB (UMEH) 12*128kB (UME) 72*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47800kB
[ 1871.170555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1871.179489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1871.188222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1871.197453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1871.206157] 415 total pagecache pages
[ 1871.210067] 0 pages in swap cache
[ 1871.213637] Swap cache stats: add 0, delete 0, find 0/0
[ 1871.219091] Free swap  = 0kB
[ 1871.222312] Total swap = 0kB
[ 1871.225416] 1965979 pages RAM
[ 1871.228595] 0 pages HighMem/MovableOnly
[ 1871.233479] 339048 pages reserved
[ 1871.237012] 0 pages cma reserved
[ 1871.240760] Out of memory: Kill process 1635 (syz-executor.1) score 1007 or sacrifice child
[ 1871.249349] Killed process 1635 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1871.298939] oom_reaper: reaped process 1635 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1871.364374] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=3, oom_score_adj=1000
[ 1871.377740] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[ 1871.383840] CPU: 1 PID: 12379 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0
[ 1871.391763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1871.401138] Call Trace:
[ 1871.403740]  dump_stack+0x13e/0x194
[ 1871.407484]  dump_header+0x178/0x6d4
[ 1871.411204]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1871.416223]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1871.421330]  ? ___ratelimit+0x50/0x519
[ 1871.425231]  oom_kill_process.cold+0x10/0xae3
[ 1871.429738]  ? lock_downgrade+0x6e0/0x6e0
[ 1871.433892]  out_of_memory+0x2d5/0x1110
[ 1871.437985]  ? oom_killer_disable+0x1c0/0x1c0
[ 1871.442487]  ? mutex_trylock+0x152/0x1a0
[ 1871.446554]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1871.451419]  ? warn_alloc+0xf0/0xf0
[ 1871.455057]  ? find_held_lock+0x2d/0x110
[ 1871.459121]  ? fs_reclaim_acquire+0x10/0x10
[ 1871.463453]  __alloc_pages_nodemask+0x5d3/0x700
[ 1871.468130]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1871.473255]  ? copy_process.part.0+0x17d5/0x6a70
[ 1871.478111]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1871.483131]  ? save_trace+0x290/0x290
[ 1871.486936]  copy_process.part.0+0x26a/0x6a70
[ 1871.491450]  ? find_held_lock+0x2d/0x110
[ 1871.495521]  ? __handle_mm_fault+0x1af7/0x3280
[ 1871.500118]  ? lock_downgrade+0x6e0/0x6e0
[ 1871.504268]  ? pud_val+0xd0/0xd0
[ 1871.507778]  ? do_raw_spin_unlock+0x164/0x250
[ 1871.512283]  ? __cleanup_sighand+0x40/0x40
[ 1871.516526]  _do_fork+0x180/0xc80
[ 1871.520000]  ? fork_idle+0x270/0x270
[ 1871.523743]  ? up_read+0x17/0x30
[ 1871.527104]  ? __do_page_fault+0x35b/0xb40
[ 1871.531354]  ? do_syscall_64+0x4c/0x640
[ 1871.535340]  ? sys_vfork+0x20/0x20
[ 1871.538887]  do_syscall_64+0x1d5/0x640
[ 1871.542787]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1871.547988] RIP: 0033:0x45ee19
[ 1871.551175] RSP: 002b:00007ffd9c701958 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 1871.558899] RAX: ffffffffffffffda RBX: 00007f62e7926700 RCX: 000000000045ee19
[ 1871.566172] RDX: 00007f62e79269d0 RSI: 00007f62e7925db0 RDI: 00000000003d0f00
[ 1871.573445] RBP: 00007ffd9c701b70 R08: 00007f62e7926700 R09: 00007f62e7926700
[ 1871.580723] R10: 00007f62e79269d0 R11: 0000000000000202 R12: 0000000000000000
[ 1871.588002] R13: 00007ffd9c701a0f R14: 00007f62e79269c0 R15: 000000000076bfcc
[ 1871.597071] Mem-Info:
[ 1871.599511] active_anon:1314169 inactive_anon:197 isolated_anon:0
[ 1871.599511]  active_file:26 inactive_file:79 isolated_file:32
[ 1871.599511]  unevictable:0 dirty:1 writeback:0 unstable:0
[ 1871.599511]  slab_reclaimable:18846 slab_unreclaimable:120082
[ 1871.599511]  mapped:52310 shmem:250 pagetables:31708 bounce:0
[ 1871.599511]  free:29325 free_pcp:109 free_cma:0
[ 1871.632951] Node 0 active_anon:1896312kB inactive_anon:768kB active_file:184kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:186228kB dirty:4kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 700416kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1871.661001] Node 1 active_anon:3360364kB inactive_anon:20kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22912kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1871.688088] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1871.715463] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1871.730099] Node 0 DMA32 free:59072kB min:36272kB low:45340kB high:54408kB active_anon:1892220kB inactive_anon:768kB active_file:72kB inactive_file:20kB unevictable:0kB writepending:4kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12160kB pagetables:40012kB bounce:0kB free_pcp:768kB local_pcp:548kB free_cma:0kB
[ 1871.762213] lowmem_reserve[]: 0 0 0 0 0
[ 1871.766233] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1871.793567] lowmem_reserve[]: 0 0 0 0 0
[ 1871.797595] Node 1 Normal free:47832kB min:53612kB low:67012kB high:80412kB active_anon:3360364kB inactive_anon:20kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30528kB pagetables:86796kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1871.828150] lowmem_reserve[]: 0 0 0 0 0
[ 1871.839025] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1871.908469] Node 0 DMA32: 54*4kB (UM) 1015*8kB (UM) 591*16kB (UME) 200*32kB (UM) 18*64kB (ME) 18*128kB (M) 3*256kB (ME) 2*512kB (ME) 0*1024kB 8*2048kB (UM) 3*4096kB (M) = 58112kB
[ 1871.925952] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1871.939124] Node 1 Normal: 765*4kB (UME) 319*8kB (UMEH) 226*16kB (UMEH) 389*32kB (UMH) 97*64kB (UMEH) 12*128kB (UME) 72*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47852kB
[ 1871.958874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1871.967944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1871.980396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1871.989258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1872.007583] 634 total pagecache pages
[ 1872.011545] 0 pages in swap cache
[ 1872.015005] Swap cache stats: add 0, delete 0, find 0/0
[ 1872.024126] Free swap  = 0kB
[ 1872.027191] Total swap = 0kB
[ 1872.030245] 1965979 pages RAM
[ 1872.033346] 0 pages HighMem/MovableOnly
[ 1872.037529] 339048 pages reserved
[ 1872.045023] 0 pages cma reserved
[ 1872.048505] Out of memory: Kill process 3340 (syz-executor.1) score 1007 or sacrifice child
[ 1872.075643] Killed process 3340 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1872.109663] oom_reaper: reaped process 3340 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1873.396296] input: syz1 as /devices/virtual/input/input176
03:37:47 executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:47 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:47 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:47 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1874.962338] input: syz1 as /devices/virtual/input/input177
[ 1875.335355] input: syz1 as /devices/virtual/input/input178
03:37:48 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:48 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:48 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:48 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:49 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:49 executing program 0:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:49 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725", 0xba}], 0x2)

03:37:49 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1876.427588] input: syz1 as /devices/virtual/input/input179
03:37:49 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:49 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:49 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="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", 0x114}], 0x2)

03:37:50 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[ 1876.453761] input: syz1 as /devices/virtual/input/input180
[ 1877.333499] syz-executor.2 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1877.333514] syz-executor.2 cpuset=syz2 mems_allowed=0-1
[ 1877.333534] CPU: 0 PID: 12508 Comm: syz-executor.2 Not tainted 4.14.171-syzkaller #0
03:37:51 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1877.333538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1877.333542] Call Trace:
[ 1877.333558]  dump_stack+0x13e/0x194
[ 1877.333578]  dump_header+0x178/0x6d4
[ 1877.333588]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1877.333597]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1877.333604]  ? ___ratelimit+0x50/0x519
[ 1877.333613]  oom_kill_process.cold+0x10/0xae3
[ 1877.333622]  ? lock_downgrade+0x6e0/0x6e0
[ 1877.333632]  out_of_memory+0x2d5/0x1110
[ 1877.333643]  ? oom_killer_disable+0x1c0/0x1c0
[ 1877.333650]  ? mutex_trylock+0x152/0x1a0
[ 1877.333659]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1877.333676]  ? warn_alloc+0xf0/0xf0
[ 1877.333682]  ? find_held_lock+0x2d/0x110
[ 1877.333689]  ? fs_reclaim_acquire+0x10/0x10
[ 1877.333703]  __alloc_pages_nodemask+0x5d3/0x700
[ 1877.333711]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1877.333717]  ? find_held_lock+0x2d/0x110
[ 1877.333735]  ? cache_grow_begin+0x32d/0x410
[ 1877.333744]  cache_grow_begin+0x7b/0x410
[ 1877.333752]  ? __cpuset_node_allowed+0xfa/0x450
[ 1877.333759]  fallback_alloc+0x205/0x2b0
[ 1877.333770]  kmem_cache_alloc+0x1ea/0x770
[ 1877.333778]  ? find_held_lock+0x2d/0x110
[ 1877.333786]  ? __do_page_fault+0x4e4/0xb40
[ 1877.333797]  getname_flags+0xc8/0x560
[ 1877.333808]  user_path_at_empty+0x2a/0x50
[ 1877.333819]  SyS_chdir+0x79/0x190
[ 1877.333827]  ? SyS_access+0x680/0x680
[ 1877.333838]  ? do_syscall_64+0x4c/0x640
[ 1877.333845]  ? SyS_access+0x680/0x680
[ 1877.333853]  do_syscall_64+0x1d5/0x640
[ 1877.333866]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1877.333873] RIP: 0033:0x45ba37
[ 1877.333877] RSP: 002b:00007ffdcd5c7508 EFLAGS: 00000246 ORIG_RAX: 0000000000000050
[ 1877.333885] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ba37
[ 1877.333889] RDX: 0000000000000001 RSI: 000000000071fe90 RDI: 00007ffdcd5c7550
[ 1877.333893] RBP: 0000000000000000 R08: 0000000000000001 R09: 000000000174e940
[ 1877.333897] R10: 000000000174ec10 R11: 0000000000000246 R12: 0000000000000000
[ 1877.333901] R13: 00007ffdcd5c7540 R14: 0000000000000000 R15: 00007ffdcd5c7550
[ 1877.341443] Mem-Info:
[ 1877.341465] active_anon:1315382 inactive_anon:198 isolated_anon:0
[ 1877.341465]  active_file:795 inactive_file:795 isolated_file:50
[ 1877.341465]  unevictable:0 dirty:80 writeback:0 unstable:0
[ 1877.341465]  slab_reclaimable:18948 slab_unreclaimable:120327
[ 1877.341465]  mapped:53698 shmem:252 pagetables:31778 bounce:0
[ 1877.341465]  free:25937 free_pcp:226 free_cma:0
[ 1877.341478] Node 0 active_anon:1913480kB inactive_anon:768kB active_file:2144kB inactive_file:2256kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:190272kB dirty:260kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 716800kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1877.341489] Node 1 active_anon:3348048kB inactive_anon:24kB active_file:1036kB inactive_file:924kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:24520kB dirty:60kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1877.341492] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1877.341506] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1877.341521] Node 0 DMA32 free:37096kB min:36272kB low:45340kB high:54408kB active_anon:1908896kB inactive_anon:768kB active_file:2472kB inactive_file:2836kB unevictable:0kB writepending:560kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12192kB pagetables:40116kB bounce:0kB free_pcp:748kB local_pcp:412kB free_cma:0kB
[ 1877.341536] lowmem_reserve[]: 0 0 0 0 0
[ 1877.341555] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1877.341567] lowmem_reserve[]: 0 0 0 0 0
[ 1877.341581] Node 1 Normal free:56256kB min:53612kB low:67012kB high:80412kB active_anon:3347572kB inactive_anon:24kB active_file:1164kB inactive_file:744kB unevictable:0kB writepending:60kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30880kB pagetables:86972kB bounce:0kB free_pcp:156kB local_pcp:156kB free_cma:0kB
[ 1877.341595] lowmem_reserve[]: 0 0 0 0 0
[ 1877.341608] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1877.341662] Node 0 DMA32: 460*4kB (M) 999*8kB (UME) 650*16kB (UME) 245*32kB (UME) 26*64kB (M) 5*128kB (M) 1*256kB (E) 0*512kB 0*1024kB 1*2048kB (U) 1*4096kB (M) = 36776kB
[ 1877.341712] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1877.341745] Node 1 Normal: 90*4kB (UM) 51*8kB (UE) 220*16kB (UMEH) 482*32kB (UMH) 182*64kB (UMEH) 35*128kB (UME) 82*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56832kB
[ 1877.341806] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1877.341812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1877.341817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1877.341821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1877.341825] 1942 total pagecache pages
[ 1877.341835] 0 pages in swap cache
[ 1877.341839] Swap cache stats: add 0, delete 0, find 0/0
[ 1877.341842] Free swap  = 0kB
[ 1877.341845] Total swap = 0kB
[ 1877.341850] 1965979 pages RAM
[ 1877.341853] 0 pages HighMem/MovableOnly
[ 1877.341856] 339048 pages reserved
[ 1877.341859] 0 pages cma reserved
[ 1877.341866] Out of memory: Kill process 12433 (syz-executor.3) score 1007 or sacrifice child
[ 1877.341901] Killed process 12433 (syz-executor.3) total-vm:75228kB, anon-rss:16560kB, file-rss:35724kB, shmem-rss:0kB
[ 1877.457305] oom_reaper: reaped process 12433 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1878.997002] kdevtmpfs invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1878.997017] kdevtmpfs cpuset=/ mems_allowed=0-1
[ 1878.997036] CPU: 1 PID: 20 Comm: kdevtmpfs Not tainted 4.14.171-syzkaller #0
[ 1878.997041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1878.997044] Call Trace:
[ 1878.997061]  dump_stack+0x13e/0x194
[ 1878.997075]  dump_header+0x178/0x6d4
[ 1878.997085]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1878.997094]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1878.997101]  ? ___ratelimit+0x50/0x519
[ 1878.997111]  oom_kill_process.cold+0x10/0xae3
[ 1878.997121]  ? lock_downgrade+0x6e0/0x6e0
[ 1878.997140]  out_of_memory+0x2d5/0x1110
[ 1878.997152]  ? oom_killer_disable+0x1c0/0x1c0
[ 1878.997161]  ? mutex_trylock+0x152/0x1a0
[ 1878.997171]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1878.997189]  ? warn_alloc+0xf0/0xf0
[ 1878.997196]  ? find_held_lock+0x2d/0x110
[ 1878.997208]  ? fs_reclaim_acquire+0x10/0x10
[ 1878.997223]  __alloc_pages_nodemask+0x5d3/0x700
[ 1878.997232]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1878.997238]  ? find_held_lock+0x2d/0x110
[ 1878.997253]  ? cache_grow_begin+0x32d/0x410
[ 1878.997263]  cache_grow_begin+0x7b/0x410
[ 1878.997272]  ? __cpuset_node_allowed+0xfa/0x450
[ 1878.997281]  fallback_alloc+0x205/0x2b0
[ 1878.997293]  kmem_cache_alloc+0x1ea/0x770
[ 1878.997300]  ? __lock_is_held+0xad/0x140
[ 1878.997306]  ? save_trace+0x290/0x290
[ 1878.997316]  getname_kernel+0x4e/0x340
[ 1878.997324]  kern_path_locked+0x64/0x2b0
[ 1878.997331]  ? nd_jump_link+0x1d0/0x1d0
[ 1878.997338]  ? __lock_acquire+0x5f7/0x4620
[ 1878.997352]  handle_remove+0x95/0x670
[ 1878.997362]  ? cacheinfo_cpu_online.cold+0x2e/0x2e
[ 1878.997370]  ? trace_hardirqs_on+0x10/0x10
[ 1878.997376]  ? _raw_spin_unlock_irq+0x24/0x80
[ 1878.997384]  ? save_trace+0x290/0x290
[ 1878.997389]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 1878.997397]  ? finish_task_switch+0x178/0x620
[ 1878.997404]  ? finish_task_switch+0x14d/0x620
[ 1878.997413]  ? switch_mm_irqs_off+0x5db/0xec0
[ 1878.997422]  ? find_held_lock+0x2d/0x110
[ 1878.997427]  ? devtmpfsd+0x1fa/0x460
[ 1878.997436]  ? lock_acquire+0x170/0x3f0
[ 1878.997443]  ? lock_downgrade+0x6e0/0x6e0
[ 1878.997454]  devtmpfsd+0x326/0x460
[ 1878.997464]  ? handle_create+0x4c0/0x4c0
[ 1878.997470]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[ 1878.997477]  ? handle_create+0x4c0/0x4c0
[ 1878.997485]  kthread+0x30d/0x420
[ 1878.997491]  ? kthread_create_on_node+0xd0/0xd0
[ 1878.997499]  ret_from_fork+0x24/0x30
[ 1879.006759] Mem-Info:
[ 1879.006783] active_anon:1320406 inactive_anon:199 isolated_anon:0
[ 1879.006783]  active_file:710 inactive_file:516 isolated_file:0
[ 1879.006783]  unevictable:0 dirty:50 writeback:18 unstable:0
[ 1879.006783]  slab_reclaimable:18966 slab_unreclaimable:120259
[ 1879.006783]  mapped:53329 shmem:252 pagetables:31791 bounce:0
[ 1879.006783]  free:21385 free_pcp:81 free_cma:0
[ 1879.006799] Node 0 active_anon:1924248kB inactive_anon:776kB active_file:1940kB inactive_file:1312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188944kB dirty:92kB writeback:64kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 718848kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1879.006816] Node 1 active_anon:3357376kB inactive_anon:20kB active_file:900kB inactive_file:752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24372kB dirty:108kB writeback:8kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1879.006820] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1879.006839] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1879.006858] Node 0 DMA32 free:27192kB min:36272kB low:45340kB high:54408kB active_anon:1919768kB inactive_anon:776kB active_file:2544kB inactive_file:1568kB unevictable:0kB writepending:256kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12320kB pagetables:40064kB bounce:0kB free_pcp:160kB local_pcp:160kB free_cma:0kB
[ 1879.007501] lowmem_reserve[]: 0 0 0 0 0
[ 1879.007517] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1879.007531] lowmem_reserve[]: 0 0 0 0 0
[ 1879.007545] Node 1 Normal free:47952kB min:53612kB low:67012kB high:80412kB active_anon:3357184kB inactive_anon:20kB active_file:736kB inactive_file:1372kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30688kB pagetables:87076kB bounce:0kB free_pcp:164kB local_pcp:64kB free_cma:0kB
[ 1879.007560] lowmem_reserve[]: 0 0 0 0 0
[ 1879.007574] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1879.007633] Node 0 DMA32: 149*4kB (UME) 786*8kB (UME) 566*16kB (UME) 201*32kB (UME) 29*64kB (M) 10*128kB (ME) 0*256kB 0*512kB 0*1024kB 1*2048kB (U) 0*4096kB = 27556kB
[ 1879.007682] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1879.007716] Node 1 Normal: 598*4kB (UMEH) 129*8kB (UME) 88*16kB (UMEH) 363*32kB (UMH) 100*64kB (UMEH) 35*128kB (UME) 82*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48320kB
[ 1879.008154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1879.008160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1879.008165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1879.008171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1879.008174] 1575 total pagecache pages
[ 1879.008184] 0 pages in swap cache
[ 1879.008189] Swap cache stats: add 0, delete 0, find 0/0
[ 1879.008192] Free swap  = 0kB
[ 1879.008195] Total swap = 0kB
[ 1879.008200] 1965979 pages RAM
[ 1879.008203] 0 pages HighMem/MovableOnly
[ 1879.008206] 339048 pages reserved
[ 1879.008209] 0 pages cma reserved
[ 1879.008216] Out of memory: Kill process 12515 (syz-executor.2) score 1007 or sacrifice child
[ 1879.008249] Killed process 12515 (syz-executor.2) total-vm:75228kB, anon-rss:16568kB, file-rss:35852kB, shmem-rss:0kB
[ 1879.103321] oom_reaper: reaped process 12515 (syz-executor.2), now anon-rss:0kB, file-rss:88kB, shmem-rss:0kB
[ 1879.280783] kdevtmpfs invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1879.280801] kdevtmpfs cpuset=/ mems_allowed=0-1
[ 1879.280819] CPU: 0 PID: 20 Comm: kdevtmpfs Not tainted 4.14.171-syzkaller #0
[ 1879.280823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1879.280826] Call Trace:
[ 1879.280842]  dump_stack+0x13e/0x194
[ 1879.280857]  dump_header+0x178/0x6d4
[ 1879.280867]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1879.280877]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1879.280886]  ? ___ratelimit+0x50/0x519
[ 1879.280897]  oom_kill_process.cold+0x10/0xae3
[ 1879.280908]  ? lock_downgrade+0x6e0/0x6e0
[ 1879.280920]  out_of_memory+0x2d5/0x1110
[ 1879.280932]  ? oom_killer_disable+0x1c0/0x1c0
[ 1879.280947]  ? mutex_trylock+0x152/0x1a0
[ 1879.280958]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1879.280978]  ? warn_alloc+0xf0/0xf0
[ 1879.280985]  ? find_held_lock+0x2d/0x110
[ 1879.280993]  ? fs_reclaim_acquire+0x10/0x10
[ 1879.281010]  __alloc_pages_nodemask+0x5d3/0x700
[ 1879.281020]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1879.281027]  ? find_held_lock+0x2d/0x110
[ 1879.281043]  ? cache_grow_begin+0x32d/0x410
[ 1879.281053]  cache_grow_begin+0x7b/0x410
[ 1879.281063]  ? __cpuset_node_allowed+0xfa/0x450
[ 1879.281072]  fallback_alloc+0x205/0x2b0
[ 1879.281084]  kmem_cache_alloc+0x1ea/0x770
[ 1879.281092]  ? __lock_is_held+0xad/0x140
[ 1879.281099]  ? save_trace+0x290/0x290
[ 1879.281116]  getname_kernel+0x4e/0x340
[ 1879.281126]  kern_path_locked+0x64/0x2b0
[ 1879.281134]  ? nd_jump_link+0x1d0/0x1d0
[ 1879.281154]  ? __lock_acquire+0x5f7/0x4620
[ 1879.281167]  handle_remove+0x95/0x670
[ 1879.281177]  ? cacheinfo_cpu_online.cold+0x2e/0x2e
[ 1879.281186]  ? trace_hardirqs_on+0x10/0x10
[ 1879.281194]  ? _raw_spin_unlock_irq+0x24/0x80
[ 1879.281204]  ? save_trace+0x290/0x290
[ 1879.281210]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 1879.281218]  ? finish_task_switch+0x178/0x620
[ 1879.281224]  ? finish_task_switch+0x14d/0x620
[ 1879.281234]  ? switch_mm_irqs_off+0x5db/0xec0
[ 1879.281243]  ? find_held_lock+0x2d/0x110
[ 1879.281250]  ? devtmpfsd+0x1fa/0x460
[ 1879.281259]  ? lock_acquire+0x170/0x3f0
[ 1879.281265]  ? lock_downgrade+0x6e0/0x6e0
[ 1879.281275]  devtmpfsd+0x326/0x460
[ 1879.281285]  ? handle_create+0x4c0/0x4c0
[ 1879.281291]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[ 1879.281299]  ? handle_create+0x4c0/0x4c0
[ 1879.281307]  kthread+0x30d/0x420
[ 1879.281313]  ? kthread_create_on_node+0xd0/0xd0
[ 1879.281320]  ret_from_fork+0x24/0x30
[ 1879.281333] Mem-Info:
[ 1879.281352] active_anon:1316342 inactive_anon:201 isolated_anon:0
[ 1879.281352]  active_file:432 inactive_file:969 isolated_file:104
[ 1879.281352]  unevictable:0 dirty:83 writeback:1 unstable:0
[ 1879.281352]  slab_reclaimable:18948 slab_unreclaimable:120087
[ 1879.281352]  mapped:53306 shmem:252 pagetables:31809 bounce:0
[ 1879.281352]  free:25632 free_pcp:41 free_cma:0
[ 1879.281366] Node 0 active_anon:1908064kB inactive_anon:772kB active_file:1260kB inactive_file:3388kB unevictable:0kB isolated(anon):0kB isolated(file):328kB mapped:189456kB dirty:124kB writeback:4kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 706560kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1879.281379] Node 1 active_anon:3357304kB inactive_anon:32kB active_file:468kB inactive_file:488kB unevictable:0kB isolated(anon):0kB isolated(file):88kB mapped:23768kB dirty:208kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1879.281383] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1879.281401] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1879.281418] Node 0 DMA32 free:42176kB min:36272kB low:45340kB high:54408kB active_anon:1903672kB inactive_anon:772kB active_file:1336kB inactive_file:3360kB unevictable:0kB writepending:128kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12352kB pagetables:40032kB bounce:0kB free_pcp:156kB local_pcp:0kB free_cma:0kB
[ 1879.281435] lowmem_reserve[]: 0 0 0 0 0
[ 1879.281451] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1879.281466] lowmem_reserve[]: 0 0 0 0 0
[ 1879.281483] Node 1 Normal free:49956kB min:53612kB low:67012kB high:80412kB active_anon:3357304kB inactive_anon:32kB active_file:704kB inactive_file:672kB unevictable:0kB writepending:208kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30784kB pagetables:87180kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1879.281500] lowmem_reserve[]: 0 0 0 0 0
[ 1879.281517] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1879.281587] Node 0 DMA32: 2*4kB (ME) 764*8kB (UME) 545*16kB (UE) 234*32kB (UMEH) 30*64kB (M) 10*128kB (ME) 0*256kB 0*512kB 0*1024kB 6*2048kB (UM) 1*4096kB (M) = 41912kB
[ 1879.281650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1879.281693] Node 1 Normal: 827*4kB (UMEH) 219*8kB (UME) 120*16kB (UMEH) 367*32kB (UMH) 101*64kB (UMEH) 35*128kB (UME) 82*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50660kB
[ 1879.281758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1879.281764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1879.281769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1879.281774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1879.281777] 1792 total pagecache pages
[ 1879.281787] 0 pages in swap cache
[ 1879.281792] Swap cache stats: add 0, delete 0, find 0/0
[ 1879.281796] Free swap  = 0kB
[ 1879.281799] Total swap = 0kB
[ 1879.281804] 1965979 pages RAM
[ 1879.281808] 0 pages HighMem/MovableOnly
[ 1879.281811] 339048 pages reserved
[ 1879.281814] 0 pages cma reserved
[ 1879.281820] Out of memory: Kill process 12540 (syz-executor.3) score 1007 or sacrifice child
[ 1879.281846] Killed process 12540 (syz-executor.3) total-vm:75096kB, anon-rss:16552kB, file-rss:35656kB, shmem-rss:0kB
[ 1879.388770] oom_reaper: reaped process 12540 (syz-executor.3), now anon-rss:0kB, file-rss:36kB, shmem-rss:0kB
[ 1879.647158] input: syz1 as /devices/virtual/input/input181
03:37:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="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", 0x114}], 0x2)

03:37:54 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:54 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:54 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:54 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:54 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:54 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1882.020932] input: syz1 as /devices/virtual/input/input182
[ 1882.762007] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=1000
[ 1882.762024] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 1882.762046] CPU: 0 PID: 12599 Comm: syz-executor.3 Not tainted 4.14.171-syzkaller #0
[ 1882.762051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1882.762055] Call Trace:
[ 1882.762075]  dump_stack+0x13e/0x194
[ 1882.762090]  dump_header+0x178/0x6d4
[ 1882.762101]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1882.762111]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1882.762119]  ? ___ratelimit+0x50/0x519
[ 1882.762141]  oom_kill_process.cold+0x10/0xae3
[ 1882.762152]  ? lock_downgrade+0x6e0/0x6e0
[ 1882.762165]  out_of_memory+0x2d5/0x1110
[ 1882.762179]  ? oom_killer_disable+0x1c0/0x1c0
[ 1882.762188]  ? mutex_trylock+0x152/0x1a0
[ 1882.762198]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1882.762224]  ? warn_alloc+0xf0/0xf0
[ 1882.762231]  ? find_held_lock+0x2d/0x110
[ 1882.762239]  ? fs_reclaim_acquire+0x10/0x10
[ 1882.762253]  __alloc_pages_nodemask+0x5d3/0x700
[ 1882.762262]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1882.762280]  cache_grow_begin+0x7b/0x410
[ 1882.762290]  ? __cpuset_node_allowed+0xfa/0x450
[ 1882.762299]  fallback_alloc+0x205/0x2b0
[ 1882.762312]  kmem_cache_alloc+0x1ea/0x770
[ 1882.762327]  getname_flags+0xc8/0x560
[ 1882.762339]  do_sys_open+0x1c4/0x3f0
[ 1882.762348]  ? filp_open+0x60/0x60
[ 1882.762360]  ? SyS_clock_settime+0x1a0/0x1a0
[ 1882.762372]  ? do_syscall_64+0x4c/0x640
[ 1882.762379]  ? SyS_open+0x30/0x30
[ 1882.762388]  do_syscall_64+0x1d5/0x640
[ 1882.762400]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1882.762408] RIP: 0033:0x45c449
[ 1882.762412] RSP: 002b:00007f1e8d63dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1882.762420] RAX: ffffffffffffffda RBX: 00007f1e8d63e6d4 RCX: 000000000045c449
[ 1882.762424] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c
[ 1882.762428] RBP: 000000000076c100 R08: 0000000000000000 R09: 0000000000000000
[ 1882.762433] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1882.762438] R13: 000000000000079c R14: 00000000004ca0d0 R15: 000000000076c10c
[ 1882.765942] Mem-Info:
[ 1882.765964] active_anon:1320780 inactive_anon:198 isolated_anon:0
[ 1882.765964]  active_file:747 inactive_file:583 isolated_file:82
[ 1882.765964]  unevictable:0 dirty:89 writeback:0 unstable:0
[ 1882.765964]  slab_reclaimable:18983 slab_unreclaimable:119607
[ 1882.765964]  mapped:53243 shmem:252 pagetables:31806 bounce:0
[ 1882.765964]  free:21687 free_pcp:75 free_cma:0
[ 1882.765979] Node 0 active_anon:1926860kB inactive_anon:768kB active_file:1152kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:187512kB dirty:140kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 714752kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1882.765993] Node 1 active_anon:3356260kB inactive_anon:24kB active_file:1836kB inactive_file:1916kB unevictable:0kB isolated(anon):0kB isolated(file):204kB mapped:25460kB dirty:216kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1882.765997] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1882.766015] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1882.766034] Node 0 DMA32 free:26788kB min:36272kB low:45340kB high:54408kB active_anon:1922584kB inactive_anon:768kB active_file:1052kB inactive_file:644kB unevictable:0kB writepending:140kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12320kB pagetables:40036kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1882.766051] lowmem_reserve[]: 0 0 0 0 0
[ 1882.766075] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1882.766092] lowmem_reserve[]: 0 0 0 0 0
[ 1882.766110] Node 1 Normal free:49564kB min:53612kB low:67012kB high:80412kB active_anon:3355700kB inactive_anon:24kB active_file:1944kB inactive_file:1964kB unevictable:0kB writepending:216kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30944kB pagetables:87164kB bounce:0kB free_pcp:300kB local_pcp:300kB free_cma:0kB
[ 1882.766128] lowmem_reserve[]: 0 0 0 0 0
[ 1882.766155] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1882.766229] Node 0 DMA32: 32*4kB (UME) 766*8kB (UME) 578*16kB (UME) 202*32kB (UME) 12*64kB (ME) 2*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 1*2048kB (E) 0*4096kB = 26832kB
[ 1882.766301] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1882.766347] Node 1 Normal: 541*4kB (UMEH) 220*8kB (UME) 203*16kB (UME) 446*32kB (UMEH) 123*64kB (UM) 13*128kB (UM) 73*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 49668kB
[ 1882.766416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1882.766422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1882.766428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1882.766433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1882.766436] 1689 total pagecache pages
[ 1882.766447] 0 pages in swap cache
[ 1882.766452] Swap cache stats: add 0, delete 0, find 0/0
[ 1882.766455] Free swap  = 0kB
[ 1882.766458] Total swap = 0kB
[ 1882.766464] 1965979 pages RAM
[ 1882.766467] 0 pages HighMem/MovableOnly
[ 1882.766470] 339048 pages reserved
[ 1882.766473] 0 pages cma reserved
[ 1882.766479] Out of memory: Kill process 12552 (syz-executor.1) score 1007 or sacrifice child
[ 1882.766512] Killed process 12552 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:35516kB, shmem-rss:0kB
[ 1882.847334] oom_reaper: reaped process 12552 (syz-executor.1), now anon-rss:0kB, file-rss:68kB, shmem-rss:0kB
03:37:57 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:57 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:57 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="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", 0x114}], 0x2)

03:37:58 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:58 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:37:58 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:59 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:59 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:59 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:37:59 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:37:59 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1886.542042] input: syz1 as /devices/virtual/input/input183
03:38:01 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x0, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:01 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afc", 0xf6}], 0x2)

[ 1893.728773] syz-executor.0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1893.764279] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[ 1893.769704] CPU: 1 PID: 7688 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[ 1893.777627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1893.786991] Call Trace:
[ 1893.789601]  dump_stack+0x13e/0x194
[ 1893.793248]  dump_header+0x178/0x6d4
[ 1893.796978]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1893.801998]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1893.807103]  ? ___ratelimit+0x50/0x519
[ 1893.810995]  oom_kill_process.cold+0x10/0xae3
[ 1893.815499]  ? lock_downgrade+0x6e0/0x6e0
[ 1893.819668]  out_of_memory+0x2d5/0x1110
[ 1893.823658]  ? oom_killer_disable+0x1c0/0x1c0
[ 1893.828155]  ? mutex_trylock+0x152/0x1a0
[ 1893.832221]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1893.837075]  ? warn_alloc+0xf0/0xf0
[ 1893.840699]  ? find_held_lock+0x2d/0x110
[ 1893.844762]  ? fs_reclaim_acquire+0x10/0x10
[ 1893.849107]  __alloc_pages_nodemask+0x5d3/0x700
[ 1893.853785]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1893.858802]  ? find_held_lock+0x2d/0x110
[ 1893.862878]  ? cache_grow_begin+0x32d/0x410
[ 1893.867196]  cache_grow_begin+0x7b/0x410
[ 1893.871243]  ? __cpuset_node_allowed+0xfa/0x450
[ 1893.875906]  fallback_alloc+0x205/0x2b0
[ 1893.879867]  kmem_cache_alloc+0x1ea/0x770
[ 1893.884000]  ? find_held_lock+0x2d/0x110
[ 1893.888046]  getname_flags+0xc8/0x560
[ 1893.891833]  do_sys_open+0x1c4/0x3f0
[ 1893.895531]  ? filp_open+0x60/0x60
[ 1893.899067]  ? __do_page_fault+0x35b/0xb40
[ 1893.903287]  ? do_syscall_64+0x4c/0x640
[ 1893.907243]  ? do_sys_open+0x3f0/0x3f0
[ 1893.911111]  do_syscall_64+0x1d5/0x640
[ 1893.914990]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1893.920161] RIP: 0033:0x45a3c0
[ 1893.923333] RSP: 002b:00007ffc2a0d1c50 EFLAGS: 00000206 ORIG_RAX: 0000000000000002
[ 1893.931023] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a3c0
[ 1893.938294] RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00000000004c0ffc
[ 1893.945634] RBP: 00000000000024a3 R08: 0000000000000001 R09: 000000000284d940
[ 1893.952884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1893.960134] R13: 00007ffc2a0d1d30 R14: 00000000001cd871 R15: 00007ffc2a0d1d40
[ 1893.985313] Mem-Info:
[ 1893.987884] active_anon:1321146 inactive_anon:197 isolated_anon:0
[ 1893.987884]  active_file:27 inactive_file:8 isolated_file:1
[ 1893.987884]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1893.987884]  slab_reclaimable:19129 slab_unreclaimable:119178
[ 1893.987884]  mapped:52241 shmem:250 pagetables:31769 bounce:0
[ 1893.987884]  free:22873 free_pcp:160 free_cma:0
[ 1894.021141] Node 0 active_anon:1926884kB inactive_anon:768kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186000kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 714752kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1894.048594] Node 1 active_anon:3357708kB inactive_anon:20kB active_file:88kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22888kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1894.075874] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1894.103047] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1894.108111] Node 0 DMA32 free:27540kB min:36272kB low:45340kB high:54408kB active_anon:1922792kB inactive_anon:768kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12160kB pagetables:40148kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[ 1894.137663] lowmem_reserve[]: 0 0 0 0 0
[ 1894.141765] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1894.167913] lowmem_reserve[]: 0 0 0 0 0
[ 1894.172029] Node 1 Normal free:54052kB min:53612kB low:67012kB high:80412kB active_anon:3357736kB inactive_anon:20kB active_file:64kB inactive_file:400kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30432kB pagetables:86904kB bounce:0kB free_pcp:304kB local_pcp:0kB free_cma:0kB
[ 1894.204769] lowmem_reserve[]: 0 0 0 0 0
[ 1894.208787] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1894.225134] Node 0 DMA32: 86*4kB (UME) 710*8kB (UME) 545*16kB (UE) 190*32kB (U) 3*64kB (UM) 16*128kB (UME) 5*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 0*2048kB 0*4096kB = 27416kB
[ 1894.241019] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1894.251796] Node 1 Normal: 101*4kB (UMEH) 152*8kB (UMH) 339*16kB (UMEH) 390*32kB (UMEH) 142*64kB (UMEH) 31*128kB (UM) 84*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54084kB
[ 1894.268494] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1894.277420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1894.286082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1894.294989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1894.303635] 325 total pagecache pages
[ 1894.307442] 0 pages in swap cache
[ 1894.310945] Swap cache stats: add 0, delete 0, find 0/0
[ 1894.316310] Free swap  = 0kB
[ 1894.319319] Total swap = 0kB
[ 1894.322438] 1965979 pages RAM
[ 1894.325538] 0 pages HighMem/MovableOnly
[ 1894.329500] 339048 pages reserved
[ 1894.333010] 0 pages cma reserved
[ 1894.336372] Out of memory: Kill process 3460 (syz-executor.1) score 1007 or sacrifice child
[ 1894.345044] Killed process 3460 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1894.389136] oom_reaper: reaped process 3460 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1894.479703] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[ 1894.527456] udevd cpuset=/ mems_allowed=0-1
[ 1894.545257] CPU: 0 PID: 3717 Comm: udevd Not tainted 4.14.171-syzkaller #0
[ 1894.552312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1894.561674] Call Trace:
[ 1894.564268]  dump_stack+0x13e/0x194
[ 1894.567887]  dump_header+0x178/0x6d4
[ 1894.571599]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1894.576623]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1894.581868]  ? ___ratelimit+0x50/0x519
[ 1894.585750]  oom_kill_process.cold+0x10/0xae3
[ 1894.590246]  ? lock_downgrade+0x6e0/0x6e0
[ 1894.594415]  out_of_memory+0x2d5/0x1110
[ 1894.598388]  ? oom_killer_disable+0x1c0/0x1c0
[ 1894.602875]  ? mutex_trylock+0x152/0x1a0
[ 1894.606933]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1894.611779]  ? warn_alloc+0xf0/0xf0
[ 1894.615410]  ? find_held_lock+0x2d/0x110
[ 1894.619479]  ? fs_reclaim_acquire+0x10/0x10
[ 1894.623830]  __alloc_pages_nodemask+0x5d3/0x700
[ 1894.628512]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1894.633529]  ? find_held_lock+0x2d/0x110
[ 1894.637584]  ? cache_grow_begin+0x32d/0x410
[ 1894.641906]  cache_grow_begin+0x7b/0x410
[ 1894.645967]  ? __cpuset_node_allowed+0xfa/0x450
[ 1894.650755]  fallback_alloc+0x205/0x2b0
[ 1894.654787]  kmem_cache_alloc+0x1ea/0x770
[ 1894.658930]  getname_flags+0xc8/0x560
[ 1894.662721]  ? __do_page_fault+0x4e4/0xb40
[ 1894.666949]  user_path_at_empty+0x2a/0x50
[ 1894.671091]  SyS_readlink+0xa4/0x260
[ 1894.674800]  ? SyS_readlinkat+0x260/0x260
[ 1894.678931]  ? up_read+0x17/0x30
[ 1894.682286]  ? __do_page_fault+0x35b/0xb40
[ 1894.686520]  ? do_syscall_64+0x4c/0x640
[ 1894.690490]  ? SyS_readlinkat+0x260/0x260
[ 1894.694632]  do_syscall_64+0x1d5/0x640
[ 1894.698624]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1894.703809] RIP: 0033:0x7f5eaa019577
[ 1894.707513] RSP: 002b:00007ffcc549afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059
[ 1894.715211] RAX: ffffffffffffffda RBX: 000000000092b030 RCX: 00007f5eaa019577
[ 1894.722476] RDX: 0000000000000400 RSI: 00007ffcc549afc0 RDI: 00007ffcc549b4a0
[ 1894.730006] RBP: 00007ffcc549bd00 R08: 00007ffcc549bd00 R09: 00007f5eaa06dde0
[ 1894.737316] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc549b4a0
[ 1894.744584] R13: 0000000000000400 R14: 00000000009807c0 R15: 000000000092b030
[ 1894.759566] Mem-Info:
[ 1894.762098] active_anon:1317023 inactive_anon:197 isolated_anon:0
[ 1894.762098]  active_file:29 inactive_file:0 isolated_file:0
[ 1894.762098]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1894.762098]  slab_reclaimable:19140 slab_unreclaimable:119194
[ 1894.762098]  mapped:52232 shmem:250 pagetables:31735 bounce:0
[ 1894.762098]  free:27178 free_pcp:144 free_cma:0
[ 1894.802287] Node 0 active_anon:1910364kB inactive_anon:768kB active_file:136kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186012kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 698368kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1894.836723] Node 1 active_anon:3357728kB inactive_anon:20kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22940kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1894.870951] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1894.903339] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1894.908560] Node 0 DMA32 free:43220kB min:36272kB low:45340kB high:54408kB active_anon:1906272kB inactive_anon:768kB active_file:60kB inactive_file:328kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12128kB pagetables:40012kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1894.943436] lowmem_reserve[]: 0 0 0 0 0
[ 1894.948786] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1894.979439] lowmem_reserve[]: 0 0 0 0 0
[ 1894.984166] Node 1 Normal free:55176kB min:53612kB low:67012kB high:80412kB active_anon:3357728kB inactive_anon:20kB active_file:36kB inactive_file:12kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30368kB pagetables:86904kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1895.017098] lowmem_reserve[]: 0 0 0 0 0
[ 1895.027538] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1895.051211] Node 0 DMA32: 40*4kB (UE) 704*8kB (UME) 545*16kB (UE) 195*32kB (UE) 4*64kB (UME) 11*128kB (UM) 5*256kB (ME) 2*512kB (UM) 2*1024kB (UE) 8*2048kB (M) 0*4096kB = 43152kB
[ 1895.080471] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1895.102441] Node 1 Normal: 426*4kB (UMEH) 160*8kB (UMH) 341*16kB (UMEH) 389*32kB (UMEH) 142*64kB (UMEH) 31*128kB (UM) 84*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55448kB
[ 1895.123161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1895.132357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1895.151963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1895.166123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1895.176953] 425 total pagecache pages
[ 1895.187672] 0 pages in swap cache
[ 1895.194089] Swap cache stats: add 0, delete 0, find 0/0
[ 1895.202567] Free swap  = 0kB
[ 1895.206988] Total swap = 0kB
[ 1895.213294] 1965979 pages RAM
[ 1895.217635] 0 pages HighMem/MovableOnly
[ 1895.238069] 339048 pages reserved
[ 1895.242146] 0 pages cma reserved
[ 1895.246492] Out of memory: Kill process 3657 (syz-executor.5) score 1007 or sacrifice child
[ 1895.256077] Killed process 3657 (syz-executor.5) total-vm:75228kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB
[ 1895.294369] oom_reaper: reaped process 3657 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
03:38:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afc", 0xf6}], 0x2)

03:38:08 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:08 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:08 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:08 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afc", 0xf6}], 0x2)

03:38:09 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:09 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1896.260926] input: syz1 as /devices/virtual/input/input185
03:38:09 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:09 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1897.861767] input: syz1 as /devices/virtual/input/input186
[ 1897.866698] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[ 1897.866713] udevd cpuset=/ mems_allowed=0-1
[ 1897.866734] CPU: 1 PID: 3663 Comm: udevd Not tainted 4.14.171-syzkaller #0
[ 1897.866738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1897.866741] Call Trace:
[ 1897.866757]  dump_stack+0x13e/0x194
[ 1897.866772]  dump_header+0x178/0x6d4
[ 1897.866782]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1897.866811]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1897.866819]  ? ___ratelimit+0x50/0x519
[ 1897.866830]  oom_kill_process.cold+0x10/0xae3
[ 1897.866841]  ? lock_downgrade+0x6e0/0x6e0
[ 1897.866853]  out_of_memory+0x2d5/0x1110
[ 1897.866866]  ? oom_killer_disable+0x1c0/0x1c0
[ 1897.866875]  ? mutex_trylock+0x152/0x1a0
[ 1897.866886]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1897.866905]  ? warn_alloc+0xf0/0xf0
[ 1897.866913]  ? find_held_lock+0x2d/0x110
[ 1897.866921]  ? fs_reclaim_acquire+0x10/0x10
[ 1897.866937]  __alloc_pages_nodemask+0x5d3/0x700
[ 1897.866948]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1897.866954]  ? find_held_lock+0x2d/0x110
[ 1897.866970]  ? cache_grow_begin+0x32d/0x410
[ 1897.866979]  cache_grow_begin+0x7b/0x410
[ 1897.866989]  ? __cpuset_node_allowed+0xfa/0x450
[ 1897.866998]  fallback_alloc+0x205/0x2b0
[ 1897.867010]  kmem_cache_alloc+0x1ea/0x770
[ 1897.867020]  ? _raw_spin_unlock+0x29/0x40
[ 1897.867029]  getname_flags+0xc8/0x560
[ 1897.867037]  ? save_trace+0x290/0x290
[ 1897.867044]  ? SyS_renameat+0x6e0/0x6e0
[ 1897.867052]  SyS_rename+0xb0/0x6d0
[ 1897.867064]  ? __do_page_fault+0x4e4/0xb40
[ 1897.867072]  ? SyS_renameat+0x6e0/0x6e0
[ 1897.867083]  ? lock_downgrade+0x6e0/0x6e0
[ 1897.867096]  ? up_read+0x17/0x30
[ 1897.867102]  ? __do_page_fault+0x35b/0xb40
[ 1897.867114]  ? do_syscall_64+0x4c/0x640
[ 1897.867120]  ? SyS_renameat+0x6e0/0x6e0
[ 1897.867129]  do_syscall_64+0x1d5/0x640
[ 1897.867141]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1897.867148] RIP: 0033:0x7f5ea9f9d527
[ 1897.867158] RSP: 002b:00007ffcc549bee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 1897.867167] RAX: ffffffffffffffda RBX: 00000000009510e0 RCX: 00007f5ea9f9d527
[ 1897.867172] RDX: 00007f5eaa2cee98 RSI: 00007ffcc549bf20 RDI: 00007ffcc549c320
[ 1897.867176] RBP: 000000000097ac70 R08: 00007f5eaa9107a0 R09: 0000000000000001
[ 1897.867181] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000097b2c0
[ 1897.867185] R13: 000000000092b030 R14: 00007ffcc549bf20 R15: 0000000000000000
[ 1897.867199] Mem-Info:
[ 1897.867217] active_anon:1321470 inactive_anon:192 isolated_anon:0
[ 1897.867217]  active_file:328 inactive_file:463 isolated_file:101
[ 1897.867217]  unevictable:0 dirty:28 writeback:0 unstable:0
[ 1897.867217]  slab_reclaimable:19157 slab_unreclaimable:118757
[ 1897.867217]  mapped:52987 shmem:250 pagetables:31841 bounce:0
[ 1897.867217]  free:21938 free_pcp:209 free_cma:0
[ 1897.867229] Node 0 active_anon:1920424kB inactive_anon:768kB active_file:784kB inactive_file:1164kB unevictable:0kB isolated(anon):0kB isolated(file):300kB mapped:188016kB dirty:84kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 694272kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1897.867242] Node 1 active_anon:3365456kB inactive_anon:0kB active_file:528kB inactive_file:688kB unevictable:0kB isolated(anon):0kB isolated(file):104kB mapped:23932kB dirty:28kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1897.867245] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1897.867262] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1897.867280] Node 0 DMA32 free:30484kB min:36272kB low:45340kB high:54408kB active_anon:1916236kB inactive_anon:768kB active_file:1244kB inactive_file:1544kB unevictable:0kB writepending:84kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12224kB pagetables:40116kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB
[ 1897.867297] lowmem_reserve[]: 0 0 0 0 0
[ 1897.867313] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1897.867329] lowmem_reserve[]: 0 0 0 0 0
[ 1897.867346] Node 1 Normal free:46872kB min:53612kB low:67012kB high:80412kB active_anon:3365632kB inactive_anon:0kB active_file:596kB inactive_file:828kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30752kB pagetables:87224kB bounce:0kB free_pcp:716kB local_pcp:0kB free_cma:0kB
[ 1897.867360] lowmem_reserve[]: 0 0 0 0 0
[ 1897.867378] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1897.867448] Node 0 DMA32: 16*4kB (UM) 615*8kB (UME) 543*16kB (UME) 205*32kB (UM) 35*64kB (UM) 8*128kB (UME) 0*256kB 2*512kB (UM) 2*1024kB (UE) 2*2048kB (M) 0*4096kB = 30664kB
[ 1897.872285] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1897.872322] Node 1 Normal: 93*4kB (UME) 191*8kB (UMH) 312*16kB (UMH) 395*32kB (UMEH) 119*64kB (UMEH) 12*128kB (U) 76*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48140kB
[ 1897.872377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1897.872381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1897.872386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1897.872390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1897.872393] 1193 total pagecache pages
[ 1897.872401] 0 pages in swap cache
[ 1897.872405] Swap cache stats: add 0, delete 0, find 0/0
[ 1897.872408] Free swap  = 0kB
[ 1897.872410] Total swap = 0kB
[ 1897.872416] 1965979 pages RAM
[ 1897.872418] 0 pages HighMem/MovableOnly
[ 1897.872421] 339048 pages reserved
[ 1897.872423] 0 pages cma reserved
[ 1897.872429] Out of memory: Kill process 12732 (syz-executor.1) score 1007 or sacrifice child
[ 1897.872469] Killed process 12732 (syz-executor.1) total-vm:75228kB, anon-rss:16564kB, file-rss:35280kB, shmem-rss:0kB
[ 1897.929028] oom_reaper: reaped process 12732 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1897.997945] syz-executor.4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=3, oom_score_adj=0
[ 1898.632167] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[ 1898.637681] CPU: 0 PID: 7683 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0
[ 1898.645482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1898.654956] Call Trace:
[ 1898.657559]  dump_stack+0x13e/0x194
[ 1898.661201]  dump_header+0x178/0x6d4
[ 1898.664932]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1898.669958]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1898.675067]  ? ___ratelimit+0x50/0x519
[ 1898.678957]  oom_kill_process.cold+0x10/0xae3
[ 1898.683456]  ? lock_downgrade+0x6e0/0x6e0
[ 1898.687592]  out_of_memory+0x2d5/0x1110
[ 1898.691568]  ? oom_killer_disable+0x1c0/0x1c0
[ 1898.696080]  ? mutex_trylock+0x152/0x1a0
[ 1898.700141]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1898.704984]  ? warn_alloc+0xf0/0xf0
[ 1898.708603]  ? find_held_lock+0x2d/0x110
[ 1898.712664]  ? fs_reclaim_acquire+0x10/0x10
[ 1898.716978]  __alloc_pages_nodemask+0x5d3/0x700
[ 1898.721630]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1898.726636]  ? copy_process.part.0+0x17d5/0x6a70
[ 1898.731370]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1898.736385]  ? __lock_acquire+0x5f7/0x4620
[ 1898.740613]  copy_process.part.0+0x26a/0x6a70
[ 1898.745100]  ? trace_hardirqs_on+0x10/0x10
[ 1898.749315]  ? save_trace+0x290/0x290
[ 1898.753102]  ? find_held_lock+0x2d/0x110
[ 1898.757148]  ? __cleanup_sighand+0x40/0x40
[ 1898.761366]  ? lock_downgrade+0x6e0/0x6e0
[ 1898.765496]  _do_fork+0x180/0xc80
[ 1898.768930]  ? put_timespec64+0xaa/0xf0
[ 1898.772883]  ? fork_idle+0x270/0x270
[ 1898.776597]  ? SyS_clock_gettime+0xf5/0x180
[ 1898.780899]  ? SyS_clock_settime+0x1a0/0x1a0
[ 1898.785293]  ? do_syscall_64+0x4c/0x640
[ 1898.789247]  ? sys_vfork+0x20/0x20
[ 1898.792777]  do_syscall_64+0x1d5/0x640
[ 1898.796650]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1898.801820] RIP: 0033:0x45aa1a
[ 1898.804991] RSP: 002b:00007ffd9c701bf0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1898.812697] RAX: ffffffffffffffda RBX: 00007ffd9c701bf0 RCX: 000000000045aa1a
[ 1898.819948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1898.827222] RBP: 00007ffd9c701c30 R08: 0000000000000001 R09: 00000000017b5940
[ 1898.834492] R10: 00000000017b5c10 R11: 0000000000000246 R12: 0000000000000001
[ 1898.841750] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd9c701c80
[ 1898.860584] Mem-Info:
[ 1898.863054] active_anon:1317131 inactive_anon:192 isolated_anon:0
[ 1898.863054]  active_file:43 inactive_file:148 isolated_file:54
[ 1898.863054]  unevictable:0 dirty:21 writeback:0 unstable:0
[ 1898.863054]  slab_reclaimable:19164 slab_unreclaimable:118483
[ 1898.863054]  mapped:52370 shmem:250 pagetables:31815 bounce:0
[ 1898.863054]  free:27621 free_pcp:137 free_cma:0
[ 1898.896663] Node 0 active_anon:1905212kB inactive_anon:768kB active_file:88kB inactive_file:528kB unevictable:0kB isolated(anon):0kB isolated(file):156kB mapped:186528kB dirty:64kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 684032kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1898.950206] Node 1 active_anon:3363312kB inactive_anon:0kB active_file:84kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:22952kB dirty:20kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1898.996639] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1899.028326] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1899.034732] Node 0 DMA32 free:47564kB min:36272kB low:45340kB high:54408kB active_anon:1901024kB inactive_anon:768kB active_file:608kB inactive_file:236kB unevictable:0kB writepending:168kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12096kB pagetables:40004kB bounce:0kB free_pcp:300kB local_pcp:240kB free_cma:0kB
[ 1899.068107] lowmem_reserve[]: 0 0 0 0 0
[ 1899.072440] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1899.101823] lowmem_reserve[]: 0 0 0 0 0
[ 1899.105995] Node 1 Normal free:52724kB min:53612kB low:67012kB high:80412kB active_anon:3363300kB inactive_anon:0kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30624kB pagetables:87128kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[ 1899.139806] lowmem_reserve[]: 0 0 0 0 0
[ 1899.144022] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1899.164603] Node 0 DMA32: 338*4kB (UM) 793*8kB (UM) 575*16kB (UM) 213*32kB (UM) 43*64kB (UM) 11*128kB (UME) 2*256kB (M) 2*512kB (UM) 2*1024kB (UE) 8*2048kB (M) 0*4096kB = 47840kB
[ 1899.184864] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1899.196512] Node 1 Normal: 687*4kB (UME) 258*8kB (UMH) 365*16kB (UM) 407*32kB (UMEH) 123*64kB (UME) 14*128kB (UM) 76*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52796kB
[ 1899.217662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1899.229383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1899.242503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1899.253277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1899.265273] 375 total pagecache pages
[ 1899.269281] 0 pages in swap cache
[ 1899.274400] Swap cache stats: add 0, delete 0, find 0/0
[ 1899.282990] Free swap  = 0kB
[ 1899.286155] Total swap = 0kB
[ 1899.289295] 1965979 pages RAM
[ 1899.293977] 0 pages HighMem/MovableOnly
[ 1899.298245] 339048 pages reserved
[ 1899.304591] 0 pages cma reserved
[ 1899.308154] Out of memory: Kill process 3836 (syz-executor.1) score 1007 or sacrifice child
[ 1899.318384] Killed process 3836 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1899.608295] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[ 1899.659795] modprobe cpuset=/ mems_allowed=0-1
[ 1899.672400] CPU: 0 PID: 12737 Comm: modprobe Not tainted 4.14.171-syzkaller #0
[ 1899.679894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1899.689259] Call Trace:
[ 1899.691868]  dump_stack+0x13e/0x194
[ 1899.695513]  dump_header+0x178/0x6d4
[ 1899.699255]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1899.704287]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1899.709400]  ? ___ratelimit+0x50/0x519
[ 1899.713305]  oom_kill_process.cold+0x10/0xae3
[ 1899.717810]  ? lock_acquire+0x170/0x3f0
[ 1899.721808]  ? lock_downgrade+0x6e0/0x6e0
[ 1899.725978]  out_of_memory+0x2d5/0x1110
[ 1899.729972]  ? oom_killer_disable+0x1c0/0x1c0
[ 1899.734475]  ? mutex_trylock+0x152/0x1a0
[ 1899.738548]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1899.743519]  ? warn_alloc+0xf0/0xf0
[ 1899.747150]  ? find_held_lock+0x2d/0x110
[ 1899.751266]  ? fs_reclaim_acquire+0x10/0x10
[ 1899.755610]  __alloc_pages_nodemask+0x5d3/0x700
[ 1899.760284]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1899.765308]  ? find_held_lock+0x2d/0x110
[ 1899.769382]  ? cache_grow_begin+0x32d/0x410
[ 1899.773715]  cache_grow_begin+0x7b/0x410
[ 1899.777780]  ? __cpuset_node_allowed+0xfa/0x450
[ 1899.782460]  fallback_alloc+0x205/0x2b0
[ 1899.786441]  kmem_cache_alloc+0x1ea/0x770
[ 1899.790582]  ? task_work_run+0xf1/0x190
[ 1899.794547]  getname_flags+0xc8/0x560
[ 1899.798362]  do_sys_open+0x1c4/0x3f0
[ 1899.802077]  ? filp_open+0x60/0x60
[ 1899.805624]  ? do_syscall_64+0x4c/0x640
[ 1899.809597]  ? do_sys_open+0x3f0/0x3f0
[ 1899.813488]  do_syscall_64+0x1d5/0x640
[ 1899.817381]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1899.822569] RIP: 0033:0x7f4c9cdbf120
[ 1899.826279] RSP: 002b:00007ffc7bed1e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1899.833988] RAX: ffffffffffffffda RBX: 00007f4c9d08a491 RCX: 00007f4c9cdbf120
[ 1899.841296] RDX: 0000000000000000 RSI: 0000000000090800 RDI: 00007f4c9d08a491
[ 1899.848566] RBP: 00007f4c9d28f2f8 R08: 00007f4c9d075ef8 R09: 00007f4c9ce12070
[ 1899.855837] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fffffffe
[ 1899.863112] R13: 00007ffc7bed20a3 R14: 0000000000000010 R15: 00055facc5da8780
[ 1899.888473] Mem-Info:
[ 1899.905259] active_anon:1315827 inactive_anon:192 isolated_anon:0
[ 1899.905259]  active_file:158 inactive_file:97 isolated_file:32
[ 1899.905259]  unevictable:0 dirty:13 writeback:0 unstable:0
[ 1899.905259]  slab_reclaimable:19178 slab_unreclaimable:118493
[ 1899.905259]  mapped:52452 shmem:250 pagetables:31784 bounce:0
[ 1899.905259]  free:28732 free_pcp:124 free_cma:0
[ 1899.939666] Node 0 active_anon:1900008kB inactive_anon:768kB active_file:456kB inactive_file:388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186756kB dirty:40kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 667648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1899.967547] Node 1 active_anon:3363300kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22912kB dirty:0kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1900.010131] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1900.037946] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1900.046977] Node 0 DMA32 free:52536kB min:36272kB low:45340kB high:54408kB active_anon:1895916kB inactive_anon:768kB active_file:296kB inactive_file:244kB unevictable:0kB writepending:40kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12096kB pagetables:39984kB bounce:0kB free_pcp:448kB local_pcp:172kB free_cma:0kB
[ 1900.078180] lowmem_reserve[]: 0 0 0 0 0
[ 1900.082661] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1900.108807] lowmem_reserve[]: 0 0 0 0 0
[ 1900.113171] Node 1 Normal free:52940kB min:53612kB low:67012kB high:80412kB active_anon:3363300kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30528kB pagetables:87128kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1900.152332] lowmem_reserve[]: 0 0 0 0 0
[ 1900.156384] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1900.173420] Node 0 DMA32: 77*4kB (UM) 654*8kB (UME) 550*16kB (UM) 197*32kB (UME) 7*64kB (UME) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 3*1024kB (UME) 9*2048kB (M) 2*4096kB (M) = 52324kB
[ 1900.189978] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1900.200838] Node 1 Normal: 689*4kB (UME) 259*8kB (UMH) 365*16kB (UM) 411*32kB (UMEH) 123*64kB (UME) 14*128kB (UM) 76*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52940kB
[ 1900.216635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1900.225545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1900.234225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1900.243127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1900.251783] 345 total pagecache pages
[ 1900.255599] 0 pages in swap cache
[ 1900.259059] Swap cache stats: add 0, delete 0, find 0/0
[ 1900.284259] Free swap  = 0kB
[ 1900.287435] Total swap = 0kB
[ 1900.310096] 1965979 pages RAM
[ 1900.313246] 0 pages HighMem/MovableOnly
[ 1900.317220] 339048 pages reserved
[ 1900.328920] 0 pages cma reserved
[ 1900.332393] Out of memory: Kill process 3903 (syz-executor.1) score 1007 or sacrifice child
[ 1900.341122] Killed process 3903 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1900.379473] oom_reaper: reaped process 3903 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
03:38:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afc", 0xf6}], 0x2)

03:38:13 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:13 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:13 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:13 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:13 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:14 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1901.247323] input: syz1 as /devices/virtual/input/input187
[ 1902.398120] syz-executor.3 invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null),  order=0, oom_score_adj=0
[ 1902.398136] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 1902.398274] CPU: 1 PID: 3553 Comm: syz-executor.3 Not tainted 4.14.171-syzkaller #0
[ 1902.398279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1902.398282] Call Trace:
[ 1902.398300]  dump_stack+0x13e/0x194
[ 1902.398314]  dump_header+0x178/0x6d4
[ 1902.398326]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1902.398336]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1902.398345]  ? ___ratelimit+0x50/0x519
[ 1902.398356]  oom_kill_process.cold+0x10/0xae3
[ 1902.398367]  ? lock_downgrade+0x6e0/0x6e0
[ 1902.398378]  out_of_memory+0x2d5/0x1110
[ 1902.398391]  ? oom_killer_disable+0x1c0/0x1c0
[ 1902.398398]  ? mutex_trylock+0x152/0x1a0
[ 1902.398408]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1902.398429]  ? warn_alloc+0xf0/0xf0
[ 1902.398447]  __alloc_pages_nodemask+0x5d3/0x700
[ 1902.398455]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1902.398462]  ? finish_task_switch+0x178/0x620
[ 1902.398468]  ? finish_task_switch+0x14d/0x620
[ 1902.398476]  ? switch_mm_irqs_off+0x5db/0xec0
[ 1902.398492]  alloc_pages_vma+0xc2/0x4a0
[ 1902.398502]  wp_page_copy+0x1f1/0x1300
[ 1902.398513]  ? follow_pfn+0x200/0x200
[ 1902.398523]  do_wp_page+0x244/0x11d0
[ 1902.398531]  ? finish_mkwrite_fault+0x640/0x640
[ 1902.398546]  __handle_mm_fault+0x1c0e/0x3280
[ 1902.398555]  ? copy_page_range+0x1d70/0x1d70
[ 1902.398563]  ? find_held_lock+0x2d/0x110
[ 1902.398580]  handle_mm_fault+0x288/0x7a0
[ 1902.398589]  __do_page_fault+0x4bc/0xb40
[ 1902.398599]  ? vmalloc_fault+0xdf0/0xdf0
[ 1902.398606]  ? do_page_fault+0x60/0x4f2
[ 1902.398613]  ? page_fault+0x2f/0x50
[ 1902.398619]  page_fault+0x45/0x50
[ 1902.398624] RIP: 720698:          (null)
[ 1902.398628] RSP: 720640:0000000000008041 EFLAGS: 00720698
[ 1902.404336] Mem-Info:
[ 1902.404358] active_anon:1319899 inactive_anon:200 isolated_anon:0
[ 1902.404358]  active_file:1226 inactive_file:1173 isolated_file:146
[ 1902.404358]  unevictable:0 dirty:135 writeback:0 unstable:0
[ 1902.404358]  slab_reclaimable:19204 slab_unreclaimable:118527
[ 1902.404358]  mapped:54426 shmem:251 pagetables:31814 bounce:0
[ 1902.404358]  free:22154 free_pcp:155 free_cma:0
[ 1902.404372] Node 0 active_anon:1907276kB inactive_anon:796kB active_file:4904kB inactive_file:4692kB unevictable:0kB isolated(anon):0kB isolated(file):584kB mapped:194792kB dirty:540kB writeback:0kB shmem:1000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 675840kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1902.404383] Node 1 active_anon:3372320kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22912kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1902.404387] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1902.404403] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1902.404420] Node 0 DMA32 free:27764kB min:36272kB low:45340kB high:54408kB active_anon:1902900kB inactive_anon:796kB active_file:5160kB inactive_file:5444kB unevictable:0kB writepending:540kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12192kB pagetables:40400kB bounce:0kB free_pcp:620kB local_pcp:412kB free_cma:0kB
[ 1902.404436] lowmem_reserve[]: 0 0 0 0 0
[ 1902.404452] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1902.404468] lowmem_reserve[]: 0 0 0 0 0
[ 1902.404484] Node 1 Normal free:50456kB min:53612kB low:67012kB high:80412kB active_anon:3372320kB inactive_anon:4kB active_file:0kB inactive_file:104kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30464kB pagetables:86832kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1902.404500] lowmem_reserve[]: 0 0 0 0 0
[ 1902.404517] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1902.404583] Node 0 DMA32: 115*4kB (UME) 52*8kB (UME) 482*16kB (UME) 189*32kB (UME) 4*64kB (UE) 2*128kB (UE) 0*256kB 2*512kB (UE) 2*1024kB (UM) 1*2048kB (M) 2*4096kB (M) = 28460kB
[ 1902.404647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1902.404686] Node 1 Normal: 166*4kB (UME) 182*8kB (UMH) 469*16kB (UMH) 422*32kB (UMEH) 106*64kB (UME) 14*128kB (U) 75*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50904kB
[ 1902.404748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1902.404753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1902.404758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1902.404763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1902.404766] 2820 total pagecache pages
[ 1902.404776] 0 pages in swap cache
[ 1902.404781] Swap cache stats: add 0, delete 0, find 0/0
[ 1902.404784] Free swap  = 0kB
[ 1902.404787] Total swap = 0kB
[ 1902.404792] 1965979 pages RAM
[ 1902.404795] 0 pages HighMem/MovableOnly
[ 1902.404798] 339048 pages reserved
[ 1902.404801] 0 pages cma reserved
[ 1902.404807] Out of memory: Kill process 12809 (syz-executor.3) score 1007 or sacrifice child
[ 1902.404844] Killed process 12809 (syz-executor.3) total-vm:75228kB, anon-rss:16560kB, file-rss:35832kB, shmem-rss:0kB
[ 1903.624970] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[ 1903.689590] blkid cpuset=/ mems_allowed=0-1
[ 1903.689611] CPU: 0 PID: 12817 Comm: blkid Not tainted 4.14.171-syzkaller #0
[ 1903.689615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1903.689618] Call Trace:
[ 1903.689637]  dump_stack+0x13e/0x194
[ 1903.689653]  dump_header+0x178/0x6d4
[ 1903.689663]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1903.689673]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1903.689680]  ? ___ratelimit+0x50/0x519
[ 1903.689691]  oom_kill_process.cold+0x10/0xae3
[ 1903.689698]  ? lock_acquire+0x170/0x3f0
[ 1903.689706]  ? lock_downgrade+0x6e0/0x6e0
[ 1903.689718]  out_of_memory+0x2d5/0x1110
[ 1903.689729]  ? oom_killer_disable+0x1c0/0x1c0
[ 1903.689738]  ? mutex_trylock+0x152/0x1a0
[ 1903.689750]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1903.689770]  ? warn_alloc+0xf0/0xf0
[ 1903.689777]  ? find_held_lock+0x2d/0x110
[ 1903.689786]  ? fs_reclaim_acquire+0x10/0x10
[ 1903.689803]  __alloc_pages_nodemask+0x5d3/0x700
[ 1903.689814]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1903.689820]  ? find_held_lock+0x2d/0x110
[ 1903.689836]  ? cache_grow_begin+0x32d/0x410
[ 1903.689846]  cache_grow_begin+0x7b/0x410
[ 1903.689855]  ? __cpuset_node_allowed+0xfa/0x450
[ 1903.689864]  fallback_alloc+0x205/0x2b0
[ 1903.689877]  kmem_cache_alloc+0x1ea/0x770
[ 1903.689886]  ? find_held_lock+0x2d/0x110
[ 1903.689898]  getname_flags+0xc8/0x560
[ 1903.689909]  do_sys_open+0x1c4/0x3f0
[ 1903.689919]  ? filp_open+0x60/0x60
[ 1903.689928]  ? __do_page_fault+0x35b/0xb40
[ 1903.689938]  ? do_syscall_64+0x4c/0x640
[ 1903.689944]  ? do_sys_open+0x3f0/0x3f0
[ 1903.689954]  do_syscall_64+0x1d5/0x640
[ 1903.689966]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1903.689974] RIP: 0033:0x7fab80b9a120
[ 1903.689979] RSP: 002b:00007fffea76ce88 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1903.689987] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab80b9a120
[ 1903.689992] RDX: 00007fffea76ef32 RSI: 0000000000000000 RDI: 00007fffea76ef32
[ 1903.689997] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000
[ 1903.690005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000001126030
[ 1903.690011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005
[ 1903.690059] Mem-Info:
[ 1903.690077] active_anon:1314531 inactive_anon:196 isolated_anon:0
[ 1903.690077]  active_file:347 inactive_file:363 isolated_file:0
[ 1903.690077]  unevictable:0 dirty:16 writeback:3 unstable:0
[ 1903.690077]  slab_reclaimable:19179 slab_unreclaimable:118740
[ 1903.690077]  mapped:52665 shmem:250 pagetables:31752 bounce:0
[ 1903.690077]  free:29537 free_pcp:52 free_cma:0
[ 1903.690092] Node 0 active_anon:1891144kB inactive_anon:784kB active_file:1380kB inactive_file:1452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187748kB dirty:64kB writeback:12kB shmem:996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 667648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1903.690105] Node 1 active_anon:3366980kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22912kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1903.690109] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1903.690124] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1903.690142] Node 0 DMA32 free:52084kB min:36272kB low:45340kB high:54408kB active_anon:1887052kB inactive_anon:784kB active_file:1080kB inactive_file:1452kB unevictable:0kB writepending:76kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12096kB pagetables:40144kB bounce:0kB free_pcp:208kB local_pcp:0kB free_cma:0kB
[ 1903.690159] lowmem_reserve[]: 0 0 0 0 0
[ 1903.690175] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1903.690191] lowmem_reserve[]: 0 0 0 0 0
[ 1903.690208] Node 1 Normal free:55668kB min:53612kB low:67012kB high:80412kB active_anon:3366980kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30432kB pagetables:86840kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1903.690223] lowmem_reserve[]: 0 0 0 0 0
[ 1903.690241] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1903.690315] Node 0 DMA32: 246*4kB (UME) 325*8kB (UME) 684*16kB (UME) 309*32kB (UME) 51*64kB (UME) 11*128kB (UM) 3*256kB (M) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (M) 4*4096kB (M) = 52384kB
[ 1903.690385] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1903.690427] Node 1 Normal: 855*4kB (UME) 165*8kB (MH) 541*16kB (UMH) 444*32kB (UMEH) 110*64kB (UME) 14*128kB (U) 75*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55636kB
[ 1903.690490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1903.690497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1903.690502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1903.690507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1903.690517] 1006 total pagecache pages
[ 1904.228544] 0 pages in swap cache
[ 1904.228551] Swap cache stats: add 0, delete 0, find 0/0
[ 1904.228555] Free swap  = 0kB
[ 1904.228558] Total swap = 0kB
[ 1904.228566] 1965979 pages RAM
[ 1904.228569] 0 pages HighMem/MovableOnly
[ 1904.228572] 339048 pages reserved
[ 1904.228575] 0 pages cma reserved
[ 1904.228583] Out of memory: Kill process 8494 (syz-executor.1) score 1007 or sacrifice child
[ 1904.228623] Killed process 8494 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1904.264581] oom_reaper: reaped process 8494 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
03:38:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afc", 0xf6}], 0x2)

03:38:17 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:17 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:17 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r8, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r8, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:17 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:17 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:18 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:18 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r8, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r8, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:18 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:18 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:18 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r8, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r8, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:18 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1905.336962] input: syz1 as /devices/virtual/input/input189
03:38:19 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:19 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:19 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:19 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:20 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:20 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afc", 0xf6}], 0x2)

03:38:20 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:20 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:20 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:21 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:21 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:21 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1907.660113] input: syz1 as /devices/virtual/input/input193
03:38:22 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
write$input_event(r2, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457a", 0xf5}], 0x2)

[ 1910.618227] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1910.630932] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 1910.636351] CPU: 1 PID: 12994 Comm: syz-executor.3 Not tainted 4.14.171-syzkaller #0
[ 1910.644237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1910.653600] Call Trace:
[ 1910.656204]  dump_stack+0x13e/0x194
[ 1910.661160]  dump_header+0x178/0x6d4
[ 1910.664887]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1910.669917]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1910.675049]  ? ___ratelimit+0x50/0x519
[ 1910.679032]  oom_kill_process.cold+0x10/0xae3
[ 1910.683637]  ? lock_acquire+0x170/0x3f0
[ 1910.687621]  ? lock_downgrade+0x6e0/0x6e0
[ 1910.691879]  out_of_memory+0x2d5/0x1110
[ 1910.695849]  ? oom_killer_disable+0x1c0/0x1c0
[ 1910.700358]  ? mutex_trylock+0x152/0x1a0
[ 1910.704416]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1910.709256]  ? warn_alloc+0xf0/0xf0
[ 1910.712883]  ? find_held_lock+0x2d/0x110
[ 1910.717043]  ? fs_reclaim_acquire+0x10/0x10
[ 1910.721356]  __alloc_pages_nodemask+0x5d3/0x700
[ 1910.726024]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1910.731045]  cache_grow_begin+0x7b/0x410
[ 1910.735096]  ? __cpuset_node_allowed+0xfa/0x450
[ 1910.739769]  fallback_alloc+0x205/0x2b0
[ 1910.743750]  kmem_cache_alloc+0x1ea/0x770
[ 1910.747907]  ? find_held_lock+0x2d/0x110
[ 1910.751971]  ? __do_page_fault+0x4e4/0xb40
[ 1910.756209]  getname_flags+0xc8/0x560
[ 1910.760049]  user_path_at_empty+0x2a/0x50
[ 1910.764201]  SyS_chdir+0x79/0x190
[ 1910.767664]  ? SyS_access+0x680/0x680
[ 1910.771470]  ? do_syscall_64+0x4c/0x640
[ 1910.775460]  ? SyS_access+0x680/0x680
[ 1910.779256]  do_syscall_64+0x1d5/0x640
[ 1910.783507]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1910.788707] RIP: 0033:0x45ba37
[ 1910.791884] RSP: 002b:00007ffc6221f4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000050
[ 1910.799594] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ba37
[ 1910.806866] RDX: 0000000000000001 RSI: 000000000071fe90 RDI: 00007ffc6221f520
[ 1910.814154] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000002486940
[ 1910.821540] R10: 0000000002486c10 R11: 0000000000000246 R12: 0000000000000000
[ 1910.828808] R13: 00007ffc6221f510 R14: 0000000000000000 R15: 00007ffc6221f520
[ 1910.926877] Mem-Info:
[ 1910.929346] active_anon:1321106 inactive_anon:196 isolated_anon:0
[ 1910.929346]  active_file:25 inactive_file:20 isolated_file:8
[ 1910.929346]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1910.929346]  slab_reclaimable:19059 slab_unreclaimable:118793
[ 1910.929346]  mapped:52232 shmem:250 pagetables:31846 bounce:0
[ 1910.929346]  free:23158 free_pcp:237 free_cma:0
[ 1910.963333] Node 0 active_anon:1917312kB inactive_anon:768kB active_file:104kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:186052kB dirty:0kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 681984kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1910.992492] Node 1 active_anon:3367112kB inactive_anon:16kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:22876kB dirty:0kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1911.020060] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1911.048173] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1911.053367] Node 0 DMA32 free:28712kB min:36272kB low:45340kB high:54408kB active_anon:1913220kB inactive_anon:768kB active_file:216kB inactive_file:272kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12096kB pagetables:40104kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB
[ 1911.084262] lowmem_reserve[]: 0 0 0 0 0
[ 1911.088419] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1911.121522] lowmem_reserve[]: 0 0 0 0 0
[ 1911.125647] Node 1 Normal free:53664kB min:53612kB low:67012kB high:80412kB active_anon:3367656kB inactive_anon:16kB active_file:128kB inactive_file:268kB unevictable:0kB writepending:16kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30592kB pagetables:87268kB bounce:0kB free_pcp:372kB local_pcp:0kB free_cma:0kB
[ 1911.160396] lowmem_reserve[]: 0 0 0 0 0
[ 1911.164888] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1911.186971] Node 0 DMA32: 435*4kB (UME) 111*8kB (UME) 512*16kB (UME) 236*32kB (UME) 60*64kB (UME) 8*128kB (UM) 6*256kB (ME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 29380kB
[ 1911.207008] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1911.217836] Node 1 Normal: 30*4kB (UME) 186*8kB (UMH) 527*16kB (UMH) 474*32kB (UMEH) 117*64kB (UME) 14*128kB (U) 75*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53688kB
[ 1911.237320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1911.246541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1911.259955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1911.268916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1911.278453] 302 total pagecache pages
[ 1911.282366] 0 pages in swap cache
[ 1911.285828] Swap cache stats: add 0, delete 0, find 0/0
[ 1911.291306] Free swap  = 0kB
[ 1911.300098] Total swap = 0kB
[ 1911.303162] 1965979 pages RAM
[ 1911.306389] 0 pages HighMem/MovableOnly
[ 1911.313895] 339048 pages reserved
[ 1911.317356] 0 pages cma reserved
[ 1911.320778] Out of memory: Kill process 12942 (syz-executor.3) score 1007 or sacrifice child
[ 1911.329398] Killed process 12942 (syz-executor.3) total-vm:75228kB, anon-rss:16560kB, file-rss:34816kB, shmem-rss:0kB
03:38:24 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1911.407602] oom_reaper: reaped process 12942 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
03:38:25 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:25 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[ 1911.515159] input: syz1 as /devices/virtual/input/input195
03:38:25 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1914.346856] syz-executor.5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=3, oom_score_adj=1000
[ 1914.360256] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 1914.365818] CPU: 0 PID: 13009 Comm: syz-executor.5 Not tainted 4.14.171-syzkaller #0
[ 1914.373708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1914.383071] Call Trace:
[ 1914.385704]  dump_stack+0x13e/0x194
[ 1914.389346]  dump_header+0x178/0x6d4
[ 1914.393058]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1914.398061]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1914.403147]  ? ___ratelimit+0x50/0x519
[ 1914.407018]  oom_kill_process.cold+0x10/0xae3
[ 1914.411507]  ? lock_acquire+0x170/0x3f0
[ 1914.415546]  ? lock_downgrade+0x6e0/0x6e0
[ 1914.419674]  out_of_memory+0x2d5/0x1110
[ 1914.423661]  ? oom_killer_disable+0x1c0/0x1c0
[ 1914.428169]  ? mutex_trylock+0x152/0x1a0
[ 1914.432216]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1914.437045]  ? warn_alloc+0xf0/0xf0
[ 1914.440655]  ? find_held_lock+0x2d/0x110
[ 1914.444704]  ? fs_reclaim_acquire+0x10/0x10
[ 1914.449022]  __alloc_pages_nodemask+0x5d3/0x700
[ 1914.453686]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1914.458681]  ? copy_process.part.0+0x17d5/0x6a70
[ 1914.463431]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1914.470709]  ? save_trace+0x290/0x290
[ 1914.474502]  copy_process.part.0+0x26a/0x6a70
[ 1914.478981]  ? find_held_lock+0x2d/0x110
[ 1914.483035]  ? __handle_mm_fault+0x1af7/0x3280
[ 1914.487599]  ? lock_downgrade+0x6e0/0x6e0
[ 1914.491764]  ? pud_val+0xd0/0xd0
[ 1914.495112]  ? do_raw_spin_unlock+0x164/0x250
[ 1914.499631]  ? __cleanup_sighand+0x40/0x40
[ 1914.503849]  _do_fork+0x180/0xc80
[ 1914.507281]  ? fork_idle+0x270/0x270
[ 1914.510973]  ? up_read+0x17/0x30
[ 1914.514402]  ? __do_page_fault+0x35b/0xb40
[ 1914.518652]  ? do_syscall_64+0x4c/0x640
[ 1914.522710]  ? sys_vfork+0x20/0x20
[ 1914.526228]  do_syscall_64+0x1d5/0x640
[ 1914.530114]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1914.535283] RIP: 0033:0x45ee19
[ 1914.538449] RSP: 002b:00007ffefa8561d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 1914.546146] RAX: ffffffffffffffda RBX: 00007f15fa0d4700 RCX: 000000000045ee19
[ 1914.553405] RDX: 00007f15fa0d49d0 RSI: 00007f15fa0d3db0 RDI: 00000000003d0f00
[ 1914.561695] RBP: 00007ffefa8563f0 R08: 00007f15fa0d4700 R09: 00007f15fa0d4700
[ 1914.568941] R10: 00007f15fa0d49d0 R11: 0000000000000202 R12: 0000000000000000
[ 1914.576200] R13: 00007ffefa85628f R14: 00007f15fa0d49c0 R15: 000000000076c06c
[ 1914.590460] Mem-Info:
[ 1914.593398] active_anon:1320557 inactive_anon:198 isolated_anon:0
[ 1914.593398]  active_file:25 inactive_file:70 isolated_file:27
[ 1914.593398]  unevictable:0 dirty:0 writeback:18 unstable:0
[ 1914.593398]  slab_reclaimable:19028 slab_unreclaimable:118800
[ 1914.593398]  mapped:52236 shmem:251 pagetables:31847 bounce:0
[ 1914.593398]  free:23979 free_pcp:56 free_cma:0
[ 1914.627594] Node 0 active_anon:1915276kB inactive_anon:772kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:0kB writeback:12kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1914.656006] Node 1 active_anon:3366952kB inactive_anon:20kB active_file:268kB inactive_file:436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22972kB dirty:0kB writeback:60kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1914.683733] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1914.710780] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1914.715990] Node 0 DMA32 free:31404kB min:36272kB low:45340kB high:54408kB active_anon:1911184kB inactive_anon:772kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12128kB pagetables:40008kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1914.764002] lowmem_reserve[]: 0 0 0 0 0
[ 1914.776210] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1914.804604] lowmem_reserve[]: 0 0 0 0 0
[ 1914.808805] Node 1 Normal free:53996kB min:53612kB low:67012kB high:80412kB active_anon:3366952kB inactive_anon:20kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:52kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30592kB pagetables:87356kB bounce:0kB free_pcp:216kB local_pcp:120kB free_cma:0kB
[ 1914.838860] lowmem_reserve[]: 0 0 0 0 0
[ 1914.858311] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1914.878779] Node 0 DMA32: 725*4kB (UME) 131*8kB (UME) 428*16kB (UME) 190*32kB (UME) 51*64kB (UME) 8*128kB (UM) 6*256kB (ME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 31404kB
[ 1914.899406] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1914.914481] Node 1 Normal: 28*4kB (UME) 208*8kB (UMH) 501*16kB (UMEH) 474*32kB (UMEH) 118*64kB (UME) 15*128kB (UE) 74*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53376kB
[ 1914.934490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1914.943551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1914.956505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1915.025187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1915.035972] 380 total pagecache pages
[ 1915.039800] 0 pages in swap cache
[ 1915.049717] Swap cache stats: add 0, delete 0, find 0/0
[ 1915.055179] Free swap  = 0kB
[ 1915.058193] Total swap = 0kB
[ 1915.064573] 1965979 pages RAM
[ 1915.067733] 0 pages HighMem/MovableOnly
[ 1915.072385] 339048 pages reserved
[ 1915.075837] 0 pages cma reserved
[ 1915.079194] Out of memory: Kill process 8617 (syz-executor.1) score 1007 or sacrifice child
[ 1915.087834] Killed process 8617 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1915.162129] oom_reaper: reaped process 8617 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1915.857972] syz-executor.5 invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null),  order=0, oom_score_adj=1000
03:38:28 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457a", 0xf5}], 0x2)

[ 1915.956493] syz-executor.5 cpuset=syz5 mems_allowed=0-1
[ 1915.967609] CPU: 1 PID: 13015 Comm: syz-executor.5 Not tainted 4.14.171-syzkaller #0
[ 1915.975525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1915.984888] Call Trace:
[ 1915.987484]  dump_stack+0x13e/0x194
[ 1915.991126]  dump_header+0x178/0x6d4
[ 1915.994848]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1915.999879]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1916.004988]  ? ___ratelimit+0x50/0x519
[ 1916.008883]  oom_kill_process.cold+0x10/0xae3
[ 1916.013383]  ? lock_acquire+0x170/0x3f0
[ 1916.017359]  ? lock_downgrade+0x6e0/0x6e0
[ 1916.021514]  out_of_memory+0x2d5/0x1110
[ 1916.025496]  ? oom_killer_disable+0x1c0/0x1c0
[ 1916.029994]  ? mutex_trylock+0x152/0x1a0
[ 1916.034059]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1916.038915]  ? warn_alloc+0xf0/0xf0
[ 1916.042567]  __alloc_pages_nodemask+0x5d3/0x700
[ 1916.047252]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1916.052274]  ? trace_hardirqs_on+0x10/0x10
[ 1916.056515]  ? save_trace+0x290/0x290
[ 1916.060323]  alloc_pages_vma+0xc2/0x4a0
[ 1916.064303]  wp_page_copy+0xa22/0x1300
[ 1916.068197]  ? follow_pfn+0x200/0x200
[ 1916.072010]  ? trace_hardirqs_on+0x10/0x10
[ 1916.077727]  do_wp_page+0x244/0x11d0
[ 1916.081450]  ? lock_acquire+0x170/0x3f0
[ 1916.085425]  ? finish_mkwrite_fault+0x640/0x640
[ 1916.090100]  __handle_mm_fault+0x1c0e/0x3280
[ 1916.094509]  ? copy_page_range+0x1d70/0x1d70
[ 1916.098920]  ? find_held_lock+0x2d/0x110
[ 1916.102993]  handle_mm_fault+0x288/0x7a0
[ 1916.107060]  __do_page_fault+0x4bc/0xb40
[ 1916.111122]  ? vmalloc_fault+0xdf0/0xdf0
[ 1916.115182]  ? do_page_fault+0x60/0x4f2
[ 1916.119160]  page_fault+0x25/0x50
[ 1916.122620] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[ 1916.128496] RSP: 0018:ffff8881f3a57b60 EFLAGS: 00010206
[ 1916.133858] RAX: 0000000000000000 RBX: 0000000000001000 RCX: 0000000000000500
[ 1916.141119] RDX: 0000000000001000 RSI: ffff8881b0f39b00 RDI: 0000000020a0a000
[ 1916.148382] RBP: 0000000020a09500 R08: ffffed10361e7400 R09: 0000000000000000
[ 1916.155636] R10: ffffed10361e73ff R11: ffff8881b0f39fff R12: ffff8881b0f39000
[ 1916.162889] R13: 00007ffffffff000 R14: 0000000020a0a500 R15: ffff8881f3a57de0
[ 1916.170860]  copyout+0x99/0xc0
[ 1916.174040]  copy_page_to_iter+0x32a/0xc80
[ 1916.178272]  pipe_to_user+0xa8/0x160
[ 1916.181969]  __splice_from_pipe+0x332/0x740
[ 1916.186274]  ? iter_to_pipe+0x4c0/0x4c0
[ 1916.190242]  vmsplice_to_user+0x197/0x1c0
[ 1916.194372]  ? __splice_from_pipe+0x740/0x740
[ 1916.198851]  ? save_trace+0x290/0x290
[ 1916.202631]  ? __might_fault+0x104/0x1b0
[ 1916.206676]  ? find_held_lock+0x2d/0x110
[ 1916.210723]  ? lock_downgrade+0x6e0/0x6e0
[ 1916.214857]  ? __fget+0x228/0x360
[ 1916.218306]  SyS_vmsplice+0x12a/0x150
[ 1916.222089]  ? default_file_splice_write+0x80/0x80
[ 1916.227001]  do_syscall_64+0x1d5/0x640
[ 1916.230873]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1916.236045] RIP: 0033:0x45c449
[ 1916.239219] RSP: 002b:00007f15fa0f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[ 1916.246909] RAX: ffffffffffffffda RBX: 00007f15fa0f56d4 RCX: 000000000045c449
03:38:29 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:29 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:29 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[ 1916.254162] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003
[ 1916.261499] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000
[ 1916.268769] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1916.276021] R13: 0000000000000c45 R14: 00000000004ce24e R15: 000000000076bfcc
[ 1916.390235] Mem-Info:
[ 1916.404034] active_anon:1317162 inactive_anon:197 isolated_anon:0
[ 1916.404034]  active_file:1203 inactive_file:1808 isolated_file:82
[ 1916.404034]  unevictable:0 dirty:12 writeback:0 unstable:0
[ 1916.404034]  slab_reclaimable:19037 slab_unreclaimable:118771
[ 1916.404034]  mapped:54712 shmem:250 pagetables:31791 bounce:0
[ 1916.404034]  free:24644 free_pcp:80 free_cma:0
03:38:29 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:29 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:29 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:30 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x932}], 0x3)

[ 1916.484649] Node 0 active_anon:1915280kB inactive_anon:768kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:4kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1916.484668] Node 1 active_anon:3353668kB inactive_anon:20kB active_file:5604kB inactive_file:7028kB unevictable:0kB isolated(anon):0kB isolated(file):156kB mapped:33156kB dirty:144kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1916.484673] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1916.484694] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1916.484715] Node 0 DMA32 free:31368kB min:36272kB low:45340kB high:54408kB active_anon:1911188kB inactive_anon:768kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12128kB pagetables:40008kB bounce:0kB free_pcp:28kB local_pcp:4kB free_cma:0kB
[ 1916.484820] lowmem_reserve[]: 0 0 0 0 0
[ 1916.484841] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1916.484859] lowmem_reserve[]: 0 0 0 0 0
[ 1916.484881] Node 1 Normal free:56292kB min:53612kB low:67012kB high:80412kB active_anon:3353368kB inactive_anon:20kB active_file:4924kB inactive_file:7260kB unevictable:0kB writepending:44kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30624kB pagetables:87132kB bounce:0kB free_pcp:148kB local_pcp:84kB free_cma:0kB
[ 1916.484901] lowmem_reserve[]: 0 0 0 0 0
[ 1916.484921] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1916.485002] Node 0 DMA32: 722*4kB (UME) 129*8kB (UME) 428*16kB (UME) 190*32kB (UME) 51*64kB (UME) 8*128kB (UM) 6*256kB (ME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 31376kB
[ 1916.485083] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1916.485132] Node 1 Normal: 65*4kB (UM) 201*8kB (UMEH) 677*16kB (UMEH) 471*32kB (UMEH) 120*64kB (UM) 17*128kB (UME) 71*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55804kB
[ 1916.485213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1916.485220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1916.485226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1916.485233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1916.485237] 3416 total pagecache pages
[ 1916.485249] 0 pages in swap cache
[ 1916.485254] Swap cache stats: add 0, delete 0, find 0/0
[ 1916.485258] Free swap  = 0kB
[ 1916.485261] Total swap = 0kB
[ 1916.485268] 1965979 pages RAM
[ 1916.485272] 0 pages HighMem/MovableOnly
[ 1916.485275] 339048 pages reserved
[ 1916.485279] 0 pages cma reserved
[ 1916.485286] Out of memory: Kill process 13014 (syz-executor.2) score 1007 or sacrifice child
[ 1916.703082] input: syz1 as /devices/virtual/input/input197
[ 1917.225958] input: syz1 as /devices/virtual/input/input198
[ 1917.955845] kdevtmpfs invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1917.956279] kdevtmpfs cpuset=/ mems_allowed=0-1
[ 1917.956304] CPU: 0 PID: 20 Comm: kdevtmpfs Not tainted 4.14.171-syzkaller #0
[ 1917.956309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1917.956313] Call Trace:
[ 1917.956331]  dump_stack+0x13e/0x194
[ 1917.956346]  dump_header+0x178/0x6d4
[ 1917.956358]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1917.956368]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1917.956376]  ? ___ratelimit+0x50/0x519
[ 1917.956387]  oom_kill_process.cold+0x10/0xae3
[ 1917.956398]  ? lock_downgrade+0x6e0/0x6e0
[ 1917.956411]  out_of_memory+0x2d5/0x1110
[ 1917.956425]  ? oom_killer_disable+0x1c0/0x1c0
[ 1917.956435]  ? mutex_trylock+0x152/0x1a0
[ 1917.956446]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1917.956466]  ? warn_alloc+0xf0/0xf0
[ 1917.956472]  ? find_held_lock+0x2d/0x110
[ 1917.956481]  ? fs_reclaim_acquire+0x10/0x10
[ 1917.956498]  __alloc_pages_nodemask+0x5d3/0x700
[ 1917.956509]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1917.956516]  ? find_held_lock+0x2d/0x110
[ 1917.956530]  ? cache_grow_begin+0x32d/0x410
[ 1917.956540]  cache_grow_begin+0x7b/0x410
[ 1917.956548]  ? __cpuset_node_allowed+0xfa/0x450
[ 1917.956556]  fallback_alloc+0x205/0x2b0
[ 1917.956568]  kmem_cache_alloc+0x1ea/0x770
[ 1917.956578]  ? finish_task_switch+0x178/0x620
[ 1917.956589]  getname_kernel+0x4e/0x340
[ 1917.956598]  kern_path_create+0x1f/0x40
[ 1917.956609]  handle_create+0x95/0x4c0
[ 1917.956616]  ? finish_task_switch+0x178/0x620
[ 1917.956623]  ? dev_mount+0x30/0x30
[ 1917.956629]  ? find_held_lock+0x2d/0x110
[ 1917.956634]  ? devtmpfsd+0x1fa/0x460
[ 1917.956642]  ? lock_acquire+0x170/0x3f0
[ 1917.956648]  ? lock_downgrade+0x6e0/0x6e0
[ 1917.956658]  devtmpfsd+0x219/0x460
[ 1917.956665]  ? handle_create+0x4c0/0x4c0
[ 1917.956670]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[ 1917.956676]  ? handle_create+0x4c0/0x4c0
[ 1917.956683]  kthread+0x30d/0x420
[ 1917.956689]  ? kthread_create_on_node+0xd0/0xd0
[ 1917.956695]  ret_from_fork+0x24/0x30
[ 1917.956788] Mem-Info:
[ 1917.956807] active_anon:1323379 inactive_anon:196 isolated_anon:0
[ 1917.956807]  active_file:647 inactive_file:620 isolated_file:65
[ 1917.956807]  unevictable:0 dirty:10 writeback:0 unstable:0
[ 1917.956807]  slab_reclaimable:19007 slab_unreclaimable:118655
[ 1917.956807]  mapped:53322 shmem:250 pagetables:31918 bounce:0
[ 1917.956807]  free:20146 free_pcp:72 free_cma:0
[ 1917.956824] Node 0 active_anon:1918564kB inactive_anon:768kB active_file:104kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186004kB dirty:24kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1917.957042] Node 1 active_anon:3374952kB inactive_anon:16kB active_file:2484kB inactive_file:2476kB unevictable:0kB isolated(anon):0kB isolated(file):260kB mapped:27284kB dirty:16kB writeback:0kB shmem:24kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1917.957048] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1917.957379] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1917.957398] Node 0 DMA32 free:27088kB min:36272kB low:45340kB high:54408kB active_anon:1914472kB inactive_anon:768kB active_file:104kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12160kB pagetables:40008kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1917.957414] lowmem_reserve[]: 0 0 0 0 0
[ 1917.957434] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1917.957651] lowmem_reserve[]: 0 0 0 0 0
[ 1917.957671] Node 1 Normal free:43100kB min:53612kB low:67012kB high:80412kB active_anon:3374684kB inactive_anon:16kB active_file:2676kB inactive_file:3108kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30752kB pagetables:87640kB bounce:0kB free_pcp:232kB local_pcp:136kB free_cma:0kB
[ 1917.957811] lowmem_reserve[]: 0 0 0 0 0
[ 1917.957831] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1917.958694] Node 0 DMA32: 96*4kB (UME) 48*8kB (UME) 409*16kB (UE) 188*32kB (UE) 51*64kB (UME) 8*128kB (UM) 6*256kB (ME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 27856kB
[ 1917.959031] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1917.959421] Node 1 Normal: 66*4kB (UM) 262*8kB (UME) 202*16kB (UME) 417*32kB (UME) 108*64kB (U) 16*128kB (UME) 56*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42232kB
[ 1917.960307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1917.960313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1917.960318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1917.960323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1917.960329] 1526 total pagecache pages
[ 1917.960537] 0 pages in swap cache
[ 1917.960542] Swap cache stats: add 0, delete 0, find 0/0
[ 1917.960548] Free swap  = 0kB
[ 1917.960551] Total swap = 0kB
[ 1917.960677] 1965979 pages RAM
[ 1917.960680] 0 pages HighMem/MovableOnly
[ 1917.960683] 339048 pages reserved
[ 1917.960686] 0 pages cma reserved
[ 1917.960696] Out of memory: Kill process 13064 (syz-executor.2) score 1007 or sacrifice child
[ 1917.961047] Killed process 13064 (syz-executor.2) total-vm:75228kB, anon-rss:16568kB, file-rss:35748kB, shmem-rss:0kB
03:38:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457a", 0xf5}], 0x2)

03:38:33 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:33 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:33 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:33 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:33 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:34 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1921.169655] input: syz1 as /devices/virtual/input/input199
[ 1921.459575] input: syz1 as /devices/virtual/input/input200
[ 1923.228125] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[ 1923.273916] modprobe cpuset=/ mems_allowed=0-1
[ 1923.310755] CPU: 1 PID: 13117 Comm: modprobe Not tainted 4.14.171-syzkaller #0
[ 1923.318188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1923.327555] Call Trace:
[ 1923.330165]  dump_stack+0x13e/0x194
[ 1923.333804]  dump_header+0x178/0x6d4
[ 1923.337525]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1923.342551]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1923.347835]  ? ___ratelimit+0x50/0x519
[ 1923.351731]  oom_kill_process.cold+0x10/0xae3
[ 1923.356232]  ? lock_downgrade+0x6e0/0x6e0
[ 1923.360386]  out_of_memory+0x2d5/0x1110
[ 1923.364369]  ? oom_killer_disable+0x1c0/0x1c0
[ 1923.368880]  ? mutex_trylock+0x152/0x1a0
[ 1923.372957]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1923.377827]  ? warn_alloc+0xf0/0xf0
[ 1923.381462]  ? find_held_lock+0x2d/0x110
[ 1923.385527]  ? fs_reclaim_acquire+0x10/0x10
[ 1923.389866]  __alloc_pages_nodemask+0x5d3/0x700
[ 1923.394539]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1923.399565]  ? find_held_lock+0x2d/0x110
[ 1923.403641]  ? cache_grow_begin+0x32d/0x410
[ 1923.407969]  cache_grow_begin+0x7b/0x410
[ 1923.412906]  ? __cpuset_node_allowed+0xfa/0x450
[ 1923.417581]  fallback_alloc+0x205/0x2b0
[ 1923.421576]  kmem_cache_alloc+0x1ea/0x770
[ 1923.425800]  ? strncpy_from_user+0x19d/0x250
[ 1923.430214]  getname_flags+0xc8/0x560
[ 1923.434015]  ? trace_hardirqs_on+0x10/0x10
[ 1923.438249]  user_path_at_empty+0x2a/0x50
[ 1923.442407]  vfs_statx+0xd1/0x160
[ 1923.445898]  ? vfs_statx_fd+0x90/0x90
[ 1923.449703]  ? find_held_lock+0x2d/0x110
[ 1923.453774]  ? task_work_run+0xf1/0x190
[ 1923.457756]  SYSC_newstat+0x83/0xe0
[ 1923.461390]  ? cp_new_stat+0x580/0x580
[ 1923.465402]  ? lock_downgrade+0x6e0/0x6e0
[ 1923.469564]  ? _raw_spin_unlock_irq+0x24/0x80
[ 1923.474067]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1923.479093]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 1923.483604]  ? task_work_run+0xf1/0x190
[ 1923.487590]  ? do_syscall_64+0x4c/0x640
[ 1923.491567]  ? SyS_fstat+0x20/0x20
[ 1923.495116]  do_syscall_64+0x1d5/0x640
[ 1923.499010]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1923.504197] RIP: 0033:0x7f18990e1c65
[ 1923.507900] RSP: 002b:00007ffcd7e00fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[ 1923.515612] RAX: ffffffffffffffda RBX: 00007f18993ad491 RCX: 00007f18990e1c65
[ 1923.522887] RDX: 00007ffcd7e010d0 RSI: 00007ffcd7e010d0 RDI: 00007f18993ad491
[ 1923.530187] RBP: 00007f18995b22f8 R08: 00007f1899398ef8 R09: 00007f1899135070
[ 1923.537471] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fffffffe
[ 1923.545626] R13: 00007ffcd7e01203 R14: 0000000000000010 R15: 0000000000000000
[ 1923.568669] Mem-Info:
[ 1923.596279] active_anon:1325178 inactive_anon:197 isolated_anon:0
[ 1923.596279]  active_file:20 inactive_file:12 isolated_file:0
[ 1923.596279]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1923.596279]  slab_reclaimable:19042 slab_unreclaimable:118563
[ 1923.596279]  mapped:52218 shmem:252 pagetables:31900 bounce:0
[ 1923.596279]  free:19769 free_pcp:0 free_cma:0
[ 1923.647371] Node 0 active_anon:1920024kB inactive_anon:768kB active_file:4kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185996kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1923.697528] Node 1 active_anon:3380688kB inactive_anon:20kB active_file:76kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:22868kB dirty:0kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1923.744598] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1923.787557] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1923.799638] Node 0 DMA32 free:27092kB min:36272kB low:45340kB high:54408kB active_anon:1915732kB inactive_anon:768kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12192kB pagetables:40012kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1923.843280] lowmem_reserve[]: 0 0 0 0 0
[ 1923.847317] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1923.886928] lowmem_reserve[]: 0 0 0 0 0
[ 1923.898011] Node 1 Normal free:41688kB min:53612kB low:67012kB high:80412kB active_anon:3380696kB inactive_anon:20kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30752kB pagetables:87564kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1923.943076] lowmem_reserve[]: 0 0 0 0 0
[ 1923.947116] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1923.979835] Node 0 DMA32: 167*4kB (UME) 50*8kB (UME) 410*16kB (UME) 190*32kB (UME) 31*64kB (UME) 8*128kB (UM) 6*256kB (ME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 26956kB
[ 1924.016270] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1924.042739] Node 1 Normal: 218*4kB (UME) 283*8kB (UMEH) 214*16kB (UME) 418*32kB (UME) 112*64kB (UME) 15*128kB (UE) 50*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41824kB
[ 1924.067323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1924.079859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1924.097327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1924.119439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1924.131744] 283 total pagecache pages
[ 1924.135579] 0 pages in swap cache
[ 1924.139028] Swap cache stats: add 0, delete 0, find 0/0
[ 1924.156872] Free swap  = 0kB
[ 1924.159915] Total swap = 0kB
[ 1924.177233] 1965979 pages RAM
[ 1924.185690] 0 pages HighMem/MovableOnly
[ 1924.189762] 339048 pages reserved
[ 1924.207679] 0 pages cma reserved
[ 1924.216588] Out of memory: Kill process 8780 (syz-executor.1) score 1007 or sacrifice child
[ 1924.239504] Killed process 8780 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1924.346212] oom_reaper: reaped process 8780 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1925.210547] input: syz1 as /devices/virtual/input/input201
03:38:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x932}], 0x3)

03:38:38 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x932}], 0x3)

03:38:38 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:38 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:38 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:38 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1927.849457] syz-executor.0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=3, oom_score_adj=1000
[ 1927.849472] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[ 1927.849497] CPU: 0 PID: 13141 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0
[ 1927.849501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1927.849504] Call Trace:
[ 1927.849520]  dump_stack+0x13e/0x194
[ 1927.849533]  dump_header+0x178/0x6d4
[ 1927.849543]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1927.849552]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1927.849560]  ? ___ratelimit+0x50/0x519
[ 1927.849569]  oom_kill_process.cold+0x10/0xae3
[ 1927.849578]  ? lock_downgrade+0x6e0/0x6e0
[ 1927.849588]  out_of_memory+0x2d5/0x1110
[ 1927.849599]  ? oom_killer_disable+0x1c0/0x1c0
[ 1927.849607]  ? mutex_trylock+0x152/0x1a0
[ 1927.849617]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1927.849634]  ? warn_alloc+0xf0/0xf0
[ 1927.849640]  ? find_held_lock+0x2d/0x110
[ 1927.849647]  ? fs_reclaim_acquire+0x10/0x10
[ 1927.849662]  __alloc_pages_nodemask+0x5d3/0x700
[ 1927.849670]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1927.849679]  ? copy_process.part.0+0x17d5/0x6a70
[ 1927.849688]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1927.849697]  ? save_trace+0x290/0x290
[ 1927.849706]  copy_process.part.0+0x26a/0x6a70
[ 1927.849713]  ? find_held_lock+0x2d/0x110
[ 1927.849721]  ? __handle_mm_fault+0x1af7/0x3280
[ 1927.849731]  ? lock_downgrade+0x6e0/0x6e0
[ 1927.849739]  ? pud_val+0xd0/0xd0
03:38:38 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x932}], 0x3)

[ 1927.849747]  ? do_raw_spin_unlock+0x164/0x250
[ 1927.849759]  ? __cleanup_sighand+0x40/0x40
[ 1927.849772]  _do_fork+0x180/0xc80
[ 1927.849781]  ? fork_idle+0x270/0x270
[ 1927.849791]  ? up_read+0x17/0x30
[ 1927.849798]  ? __do_page_fault+0x35b/0xb40
[ 1927.849808]  ? do_syscall_64+0x4c/0x640
[ 1927.849814]  ? sys_vfork+0x20/0x20
[ 1927.849821]  do_syscall_64+0x1d5/0x640
[ 1927.849832]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1927.849838] RIP: 0033:0x45ee19
[ 1927.849842] RSP: 002b:00007ffc2a0d1a18 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[ 1927.849850] RAX: ffffffffffffffda RBX: 00007f281da0b700 RCX: 000000000045ee19
[ 1927.849854] RDX: 00007f281da0b9d0 RSI: 00007f281da0adb0 RDI: 00000000003d0f00
[ 1927.849859] RBP: 00007ffc2a0d1c30 R08: 00007f281da0b700 R09: 00007f281da0b700
[ 1927.849863] R10: 00007f281da0b9d0 R11: 0000000000000202 R12: 0000000000000000
[ 1927.849867] R13: 00007ffc2a0d1acf R14: 00007f281da0b9c0 R15: 000000000076c06c
[ 1927.849973] Mem-Info:
[ 1927.849990] active_anon:1322017 inactive_anon:201 isolated_anon:0
[ 1927.849990]  active_file:58 inactive_file:76 isolated_file:7
[ 1927.849990]  unevictable:0 dirty:1 writeback:6 unstable:0
[ 1927.849990]  slab_reclaimable:19067 slab_unreclaimable:118304
[ 1927.849990]  mapped:52286 shmem:252 pagetables:31873 bounce:0
[ 1927.849990]  free:23028 free_pcp:12 free_cma:0
[ 1927.850007] Node 0 active_anon:1920032kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:0kB writeback:8kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1927.850068] Node 1 active_anon:3368036kB inactive_anon:36kB active_file:228kB inactive_file:300kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:23152kB dirty:4kB writeback:16kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1927.850071] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1927.850102] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1927.850118] Node 0 DMA32 free:27228kB min:36272kB low:45340kB high:54408kB active_anon:1915940kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12160kB pagetables:40012kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1927.850134] lowmem_reserve[]: 0 0 0 0 0
[ 1927.850148] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1927.850161] lowmem_reserve[]: 0 0 0 0 0
[ 1927.850176] Node 1 Normal free:54488kB min:53612kB low:67012kB high:80412kB active_anon:3367840kB inactive_anon:36kB active_file:568kB inactive_file:0kB unevictable:0kB writepending:20kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30592kB pagetables:87456kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB
[ 1927.850190] lowmem_reserve[]: 0 0 0 0 0
[ 1927.850211] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1927.850331] Node 0 DMA32: 172*4kB (UME) 62*8kB (UME) 411*16kB (UME) 191*32kB (UME) 33*64kB (UME) 8*128kB (UM) 6*256kB (ME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 27248kB
[ 1927.850389] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1927.850424] Node 1 Normal: 483*4kB (UM) 695*8kB (UME) 301*16kB (UME) 463*32kB (UME) 128*64kB (UME) 17*128kB (UM) 67*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54644kB
[ 1927.850479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1927.850484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1927.850489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1927.850493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1927.850496] 372 total pagecache pages
[ 1927.850505] 0 pages in swap cache
[ 1927.850509] Swap cache stats: add 0, delete 0, find 0/0
[ 1927.850511] Free swap  = 0kB
[ 1927.850514] Total swap = 0kB
[ 1927.850519] 1965979 pages RAM
[ 1927.850521] 0 pages HighMem/MovableOnly
[ 1927.850524] 339048 pages reserved
[ 1927.850526] 0 pages cma reserved
[ 1927.850532] Out of memory: Kill process 8913 (syz-executor.1) score 1007 or sacrifice child
[ 1927.850570] Killed process 8913 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1927.905623] oom_reaper: reaped process 8913 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
03:38:41 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:41 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:41 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:41 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:41 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x0, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:42 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1929.251923] input: syz1 as /devices/virtual/input/input202
[ 1930.051561] input: syz1 as /devices/virtual/input/input203
[ 1930.696842] syz-executor.3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),  order=3, oom_score_adj=0
[ 1930.696859] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 1930.696882] CPU: 0 PID: 3553 Comm: syz-executor.3 Not tainted 4.14.171-syzkaller #0
[ 1930.696887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1930.696890] Call Trace:
[ 1930.696911]  dump_stack+0x13e/0x194
[ 1930.696928]  dump_header+0x178/0x6d4
[ 1930.696939]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1930.696949]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1930.697031]  ? ___ratelimit+0x50/0x519
[ 1930.697053]  oom_kill_process.cold+0x10/0xae3
[ 1930.697064]  ? lock_acquire+0x170/0x3f0
[ 1930.697072]  ? lock_downgrade+0x6e0/0x6e0
[ 1930.697083]  out_of_memory+0x2d5/0x1110
[ 1930.697107]  ? oom_killer_disable+0x1c0/0x1c0
[ 1930.697117]  ? mutex_trylock+0x152/0x1a0
[ 1930.697129]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1930.697148]  ? warn_alloc+0xf0/0xf0
[ 1930.697156]  ? find_held_lock+0x2d/0x110
[ 1930.697164]  ? fs_reclaim_acquire+0x10/0x10
[ 1930.697182]  __alloc_pages_nodemask+0x5d3/0x700
[ 1930.697193]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1930.697209]  ? copy_process.part.0+0x17d5/0x6a70
[ 1930.697218]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1930.697228]  ? __lock_acquire+0x5f7/0x4620
[ 1930.697240]  copy_process.part.0+0x26a/0x6a70
[ 1930.697250]  ? trace_hardirqs_on+0x10/0x10
[ 1930.697261]  ? save_trace+0x290/0x290
[ 1930.697274]  ? find_held_lock+0x2d/0x110
[ 1930.697287]  ? __cleanup_sighand+0x40/0x40
[ 1930.697293]  ? lock_downgrade+0x6e0/0x6e0
[ 1930.697308]  _do_fork+0x180/0xc80
[ 1930.697320]  ? put_timespec64+0xaa/0xf0
[ 1930.697328]  ? fork_idle+0x270/0x270
[ 1930.697341]  ? SyS_clock_gettime+0xf5/0x180
[ 1930.697349]  ? SyS_clock_settime+0x1a0/0x1a0
[ 1930.697358]  ? do_syscall_64+0x4c/0x640
[ 1930.697366]  ? sys_vfork+0x20/0x20
[ 1930.697375]  do_syscall_64+0x1d5/0x640
[ 1930.697388]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1930.697397] RIP: 0033:0x45aa1a
[ 1930.697401] RSP: 002b:00007ffc6221f490 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1930.697411] RAX: ffffffffffffffda RBX: 00007ffc6221f490 RCX: 000000000045aa1a
[ 1930.697416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1930.697420] RBP: 00007ffc6221f4d0 R08: 0000000000000001 R09: 0000000002486940
[ 1930.697424] R10: 0000000002486c10 R11: 0000000000000246 R12: 0000000000000001
[ 1930.697429] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc6221f520
[ 1930.697455] Mem-Info:
[ 1930.697474] active_anon:1321613 inactive_anon:196 isolated_anon:0
[ 1930.697474]  active_file:235 inactive_file:232 isolated_file:32
[ 1930.697474]  unevictable:0 dirty:29 writeback:0 unstable:0
[ 1930.697474]  slab_reclaimable:19121 slab_unreclaimable:118711
[ 1930.697474]  mapped:52606 shmem:250 pagetables:31867 bounce:0
[ 1930.697474]  free:22849 free_pcp:47 free_cma:0
[ 1930.697489] Node 0 active_anon:1920028kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:8kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1930.697502] Node 1 active_anon:3366424kB inactive_anon:16kB active_file:936kB inactive_file:924kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:24432kB dirty:108kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1930.697506] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1930.697523] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1930.697542] Node 0 DMA32 free:27256kB min:36272kB low:45340kB high:54408kB active_anon:1915936kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12160kB pagetables:40012kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1930.697558] lowmem_reserve[]: 0 0 0 0 0
[ 1930.697575] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1930.697590] lowmem_reserve[]: 0 0 0 0 0
[ 1930.697608] Node 1 Normal free:53744kB min:53612kB low:67012kB high:80412kB active_anon:3366116kB inactive_anon:16kB active_file:1196kB inactive_file:1104kB unevictable:0kB writepending:108kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30688kB pagetables:87432kB bounce:0kB free_pcp:180kB local_pcp:0kB free_cma:0kB
[ 1930.697625] lowmem_reserve[]: 0 0 0 0 0
[ 1930.697641] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1930.697709] Node 0 DMA32: 175*4kB (UME) 62*8kB (UME) 412*16kB (UME) 191*32kB (UME) 33*64kB (UME) 8*128kB (UM) 6*256kB (ME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 27276kB
[ 1930.697776] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1930.697818] Node 1 Normal: 128*4kB (UME) 126*8kB (UME) 309*16kB (UME) 613*32kB (UM) 125*64kB (UM) 16*128kB (UM) 67*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53280kB
[ 1930.697882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1930.697888] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1930.697893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1930.697898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1930.697902] 710 total pagecache pages
[ 1930.697912] 0 pages in swap cache
[ 1930.697917] Swap cache stats: add 0, delete 0, find 0/0
[ 1930.697920] Free swap  = 0kB
[ 1930.697923] Total swap = 0kB
[ 1930.697929] 1965979 pages RAM
[ 1930.697932] 0 pages HighMem/MovableOnly
[ 1930.697934] 339048 pages reserved
[ 1930.697937] 0 pages cma reserved
[ 1930.697943] Out of memory: Kill process 13209 (syz-executor.1) score 1007 or sacrifice child
[ 1930.697984] Killed process 13209 (syz-executor.1) total-vm:75228kB, anon-rss:16564kB, file-rss:34924kB, shmem-rss:0kB
03:38:46 executing program 4:
mkdir(&(0x7f0000001340)='./file0\x00', 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180))
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='[c::]:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
tkill(0x0, 0x1002000000013)

03:38:46 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x0, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:46 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:46 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:46 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:46 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1933.392393] libceph: connect [c::]:6789 error -101
[ 1933.397536] libceph: mon0 [c::]:6789 connect error
03:38:46 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x0, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:46 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:46 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1933.671210] input: syz1 as /devices/virtual/input/input204
[ 1933.687549] input: syz1 as /devices/virtual/input/input205
[ 1934.010615] libceph: connect [c::]:6789 error -101
[ 1934.015824] libceph: mon0 [c::]:6789 connect error
[ 1934.769711] blkid invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[ 1934.794957] blkid cpuset=/ mems_allowed=0-1
[ 1934.799519] CPU: 0 PID: 13267 Comm: blkid Not tainted 4.14.171-syzkaller #0
[ 1934.806726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1934.816083] Call Trace:
[ 1934.818747]  dump_stack+0x13e/0x194
[ 1934.822378]  dump_header+0x178/0x6d4
[ 1934.826085]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1934.831108]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1934.836211]  ? ___ratelimit+0x50/0x519
[ 1934.840100]  oom_kill_process.cold+0x10/0xae3
[ 1934.844607]  ? lock_downgrade+0x6e0/0x6e0
[ 1934.848771]  out_of_memory+0x2d5/0x1110
[ 1934.852756]  ? oom_killer_disable+0x1c0/0x1c0
[ 1934.857289]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1934.862189]  ? warn_alloc+0xf0/0xf0
[ 1934.865866]  ? find_held_lock+0x2d/0x110
[ 1934.869926]  ? fs_reclaim_acquire+0x10/0x10
[ 1934.874248]  __alloc_pages_nodemask+0x5d3/0x700
[ 1934.879354]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1934.884365]  ? find_held_lock+0x2d/0x110
[ 1934.888426]  ? cache_grow_begin+0x32d/0x410
[ 1934.892750]  cache_grow_begin+0x7b/0x410
[ 1934.896818]  ? __cpuset_node_allowed+0xfa/0x450
[ 1934.901610]  fallback_alloc+0x205/0x2b0
[ 1934.905624]  kmem_cache_alloc+0x1ea/0x770
[ 1934.909801]  ? find_held_lock+0x2d/0x110
[ 1934.913866]  getname_flags+0xc8/0x560
[ 1934.917666]  do_sys_open+0x1c4/0x3f0
[ 1934.921382]  ? filp_open+0x60/0x60
[ 1934.924920]  ? __do_page_fault+0x35b/0xb40
[ 1934.930282]  ? do_syscall_64+0x4c/0x640
[ 1934.934253]  ? do_sys_open+0x3f0/0x3f0
[ 1934.938135]  do_syscall_64+0x1d5/0x640
[ 1934.942031]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1934.947252] RIP: 0033:0x7f8ee4b96120
[ 1934.950986] RSP: 002b:00007fffe90d8288 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1934.958691] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8ee4b96120
[ 1934.965957] RDX: 00007fffe90d8f32 RSI: 0000000000000000 RDI: 00007fffe90d8f32
[ 1934.973223] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000
[ 1934.980673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a30030
[ 1934.987942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005
[ 1934.997617] Mem-Info:
[ 1935.000395] active_anon:1322631 inactive_anon:197 isolated_anon:0
[ 1935.000395]  active_file:530 inactive_file:499 isolated_file:65
[ 1935.000395]  unevictable:0 dirty:39 writeback:0 unstable:0
[ 1935.000395]  slab_reclaimable:19097 slab_unreclaimable:119040
[ 1935.000395]  mapped:53087 shmem:252 pagetables:31951 bounce:0
[ 1935.000395]  free:20520 free_pcp:198 free_cma:0
[ 1935.034705] Node 0 active_anon:1920720kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:12kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1935.063396] Node 1 active_anon:3369896kB inactive_anon:20kB active_file:1804kB inactive_file:1648kB unevictable:0kB isolated(anon):0kB isolated(file):248kB mapped:25964kB dirty:164kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1935.091690] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1935.132977] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1935.138065] Node 0 DMA32 free:27292kB min:36272kB low:45340kB high:54408kB active_anon:1916700kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12160kB pagetables:40012kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB
[ 1935.200224] lowmem_reserve[]: 0 0 0 0 0
[ 1935.210218] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1935.276597] lowmem_reserve[]: 0 0 0 0 0
[ 1935.293591] Node 1 Normal free:47076kB min:53612kB low:67012kB high:80412kB active_anon:3369948kB inactive_anon:20kB active_file:720kB inactive_file:1136kB unevictable:0kB writepending:200kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30976kB pagetables:87808kB bounce:0kB free_pcp:224kB local_pcp:80kB free_cma:0kB
[ 1935.327346] lowmem_reserve[]: 0 0 0 0 0
[ 1935.331562] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1935.354376] Node 0 DMA32: 233*4kB (UME) 143*8kB (UME) 412*16kB (UME) 190*32kB (UE) 22*64kB (UME) 8*128kB (UM) 6*256kB (ME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 27420kB
[ 1935.374654] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1935.414235] Node 1 Normal: 747*4kB (UM) 87*8kB (UMEH) 120*16kB (UMEH) 493*32kB (UMEH) 126*64kB (UMEH) 12*128kB (UME) 66*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47876kB
[ 1935.453989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1935.473686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1935.493850] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1935.525752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1935.538418] 363 total pagecache pages
[ 1935.542322] 0 pages in swap cache
[ 1935.545801] Swap cache stats: add 0, delete 0, find 0/0
[ 1935.554838] Free swap  = 0kB
[ 1935.557889] Total swap = 0kB
[ 1935.560971] 1965979 pages RAM
[ 1935.564862] 0 pages HighMem/MovableOnly
[ 1935.568858] 339048 pages reserved
[ 1935.575765] 0 pages cma reserved
[ 1935.579158] Out of memory: Kill process 10154 (syz-executor.1) score 1007 or sacrifice child
[ 1935.587823] Killed process 10154 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1936.540340] oom_reaper: reaped process 13244 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
03:38:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x932}], 0x3)

03:38:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afca42eb537d619e2375c4a828dc1ef726e69ed7cb4ce897006de0ba53564ebc41ee4f598786fc2df7d6f90bde8b084955decee04a6e12b9891a4c7c0816b6253467d0f5b5d7a6578d38115477b2d05826485bde9313bb9c2e36f55dece59d699e860ae4740a87b83af4a3849c5a5142d1dec588dbe8b3d69799e4c2b94edf6b7206cd39ecb5c828ec09252b8355b7242999efc12d7cbad66291e951a4c64a819ad9a3628dd347bf6a6f77116e5bcdc38aeb7c313c845c1e3d33ba4d947df47c5ac31e4b0f3d131096aa952931bba6c2e751ae4795a5c727ef873bf5421dda582e3a4d7d42754acb0bff0395cca2a72b8a61e9b6e0231b9828505dbb51f4aa8ff4251bb10e9bee334f94105d24b5e1091ae41dafebf1938d4ce3bfe115918e34ec457f74fc942b7d80970b5e8b227a80506c89bd8eb3a8463d2c8f06bc5044d111d62c69024dcebab7db42488a99c92e792dffdb0dfa8582055305d9027e2dcb53881f35df59e4a9bb8ad3bb61fb0aebf7df953901c41a1a9008240b67f184aee4a46947fca7e76eb99eb59db857a1b25ea7d4f72752d228c9cb63749ea632f857dc5cbbbb85611a4a5a48a1a5a899180cb1a13f6aedf1981038dc560de408507a7efbccc543f8edfcbf6c0da1ca59be62c63a2fcf3e6c939e1fcb168dc6fa1a5ffbed08f2d26c775303d0014ec1bf04de69d52c45279c712ed6e885fff3a0f8e8876a8f28f693d7804b6af71c771e0a5c85bb6431146017e0949d9a32385b0b9a171c8fff22eded949a3714333f45abde5bb4275d8d8190afd64c06f2c68e809f7894572aa88b5c5ebdaf2cd3d2a7ebe806ea132af47aef0a6414f6233ef168f8bc1953487f88a907da0b3eb5116544b1f26fda72b7e0e507ac352701a0b74cda37291cbffdf201e18913f286703ada8db384a3b61f617088f60acda46e7cd62a2f9d9adeddba6f60db2fdb377efe5940b3aaffcf77218f513fb82587431237ae17961539e2962c9cb3cd68b06f36ea2f3007c7a5891a9087e172154c8135dbc5200016e59767489cb33b4e7c44fb23a44fcd0a85ada8cf093c6584d7995359ee71cc62ff9cd706d095e856e1cdb73bd464c8a7037514d11b4a890f7510e378cd7ad0ba915434f6c285cddf55e8fb325d386eb235c65acd74d08f79321d9773e62bd906ac98588d9fb36c08a999f218e2893f748a3630a3bcbc78f1118e62ac10f3c7f8af1927ca731ac139bc14480c4d066bf544ebfcc59cb7bb20c04346418a21775c7e9e25617c130ac0598c3107b953f4b7c058443f3e609fc052cb514cb0aa1c86e174da295bcb4e85576d9cf60419fa9b95546fbfb276b42249554a41e15fe97a49b410dd0a24fb1a10923f0a073340a7e943fd3634b0bf356a350e2b8e8888047f9ce7d42f3d7f3a7cee438483aa273769c7c02103f037d9e4bf4d42f000fb889fe6c7f31951de1b2d60a1600b8fa13740e134f73fbcebe63aea1e21bac0219deb0c63118087483ac9dedf463ef79aaff90de7d3068dac5b964ff35b3e3a315184924dadd154d1de4af12265ddcb482e2e4919776478396bfc5a82daa05d08587b2e1db0ff27a395683f88cf31cc58091d1f31186f10b50362071fd22369966b2832d9915fc3dbee5015ef24ad4e58d4e9f03ed547b819fd96d81cd0704dab1f505ba492ecdd9d63a2fab73953aabd478b6c63d48d60c171c448d685b21d7d430b2e0d6799bda57933be99fc34513a6c322a9928894f4c0ccac7ef0931305ff0a5eb55eebf48b345a5950f8bdf032c3e23d11d70da3a0b1398e9c46da41144f6051427310c23db6f48e3088df6aaf0caffb1661932c177655e3fa84f77a1a4eb19e71dc1bb0d259c5561d43d61b297d717059ceaf302ac94bbffaa94764f1e70375046849641dc28908163a79afb44c70f3d5156da46d9a9679e4b00e7aa3e47bb054ffa0d4cdf2b39b396673f68f40bdd8fff290b782728a64ba8563a1286f96d420603ae3ce00aec6d497d0a821bcc3173004e71ef3d0e0bf799d5508645056d328dde88a3c0b38788e10f59bfc23555810f514f55debee205a6c82d2ba36c60a336d6ff5eaa8d861c55138c1e02b22f07e39a2f44ee65bc8a00242dabadb8fa579c153b840fa5990bcf985d35e82048ea1a844f4f090600f6e1b025eb9a1da2fdfa693c28cf628135dfc887aebcda4a64d3e9a7c05624c49324f9ede0154a7f109e703e3deb88079d39af82c8498e3f071d42827a328fd1538d62c5e9c707740ed9bc28723d1972ff842e4e9d767837f7715a74ce2bc0d7ddd463b89673d4bdc7207aa8b862071a18fe569098d18f28e00c8fa6e9330a1547e5413760f6ef0830917fb043a2f0f77591e75dc4b27ff745151c914a88865aefc877b74be3905e7f10d1a343bd77ff2e5d77a0a8b4734e86a9e246c21fbd1e1a53915c52083d536341fe88f2eb36ee7ad4d8948534b07ba1cb95f7a4521c94a5fe887d22792af4f8a9435dfb334e8babbebd72867097a9392cd3dd5571967da5ec4fe60855487bfd8d0761eca2bc00c830456ae333158a06c287da0d9a83bb57bb81d5f4f1c7f847dc6da74d3999d35e8f694b284c4765184917bf8a3ab65ff6967aefd2b8ef7994e5cc8b35bfe814d0ef5c65f217eae8817fb3e62395d603376d384f83838b9c6f388d8e403d74a3e06bdb0eb951739623e0634c202dc036b26876083583fb6636b1b78ccc85887be9854703cf381de4952b94825cd86ee0a21a08366c44f9c04dc9bb6e7d631917ce976372fc12e2ddbfd5fb288cfd15164a2f4521dee07f888e70a73f25ed4970a47192fa505dd5cd429c4d66a01b918296c10efb1b8e91f281a569c2e7bf4e79de13091a98feaaadf5471b329af93f3615710f33b78bedca3707b5879e19092f6ea535ffa84daad97b5ecc6d309b94c1a7805d610e4fa3c8b0edc1d6748b20a0007b47afe8b710cfebe1fbb285b2e613e", 0x932}], 0x3)

03:38:50 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:50 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:50 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:50 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x0, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1938.226823] udevd invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=-1000
[ 1938.226839] udevd cpuset=/ mems_allowed=0-1
[ 1938.226860] CPU: 0 PID: 3717 Comm: udevd Not tainted 4.14.171-syzkaller #0
[ 1938.226865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1938.226869] Call Trace:
[ 1938.226887]  dump_stack+0x13e/0x194
[ 1938.226902]  dump_header+0x178/0x6d4
[ 1938.226912]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1938.226921]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1938.226930]  ? ___ratelimit+0x50/0x519
[ 1938.226941]  oom_kill_process.cold+0x10/0xae3
[ 1938.226950]  ? lock_downgrade+0x6e0/0x6e0
[ 1938.226961]  out_of_memory+0x2d5/0x1110
[ 1938.226973]  ? oom_killer_disable+0x1c0/0x1c0
[ 1938.226986]  ? mutex_trylock+0x152/0x1a0
[ 1938.226997]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1938.227015]  ? warn_alloc+0xf0/0xf0
[ 1938.227022]  ? find_held_lock+0x2d/0x110
[ 1938.227029]  ? fs_reclaim_acquire+0x10/0x10
[ 1938.227045]  __alloc_pages_nodemask+0x5d3/0x700
[ 1938.227054]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1938.227060]  ? find_held_lock+0x2d/0x110
[ 1938.227075]  ? cache_grow_begin+0x32d/0x410
[ 1938.227084]  cache_grow_begin+0x7b/0x410
[ 1938.227093]  ? __cpuset_node_allowed+0xfa/0x450
[ 1938.227101]  fallback_alloc+0x205/0x2b0
[ 1938.227112]  kmem_cache_alloc+0x1ea/0x770
[ 1938.227124]  ? fsnotify+0x1110/0x1110
[ 1938.227133]  getname_flags+0xc8/0x560
[ 1938.227145]  user_path_at_empty+0x2a/0x50
[ 1938.227156]  SyS_readlink+0xa4/0x260
[ 1938.227165]  ? SyS_readlinkat+0x260/0x260
[ 1938.227179]  ? do_syscall_64+0x4c/0x640
[ 1938.227185]  ? SyS_readlinkat+0x260/0x260
[ 1938.227193]  do_syscall_64+0x1d5/0x640
[ 1938.227205]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1938.227218] RIP: 0033:0x7f5eaa019577
[ 1938.227223] RSP: 002b:00007ffcc549c5b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000059
[ 1938.227231] RAX: ffffffffffffffda RBX: 000000000092b030 RCX: 00007f5eaa019577
[ 1938.227236] RDX: 00000000000003fc RSI: 00007ffcc549c9e4 RDI: 00007ffcc549c5e0
[ 1938.227240] RBP: 00000000000003fc R08: 000000000092b0f0 R09: 00007f5eaa06e1d0
[ 1938.227244] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000003
[ 1938.227248] R13: 0000000000000000 R14: 000000000093c5e0 R15: 000000000092b030
[ 1938.228970] Mem-Info:
[ 1938.228991] active_anon:1322806 inactive_anon:196 isolated_anon:0
[ 1938.228991]  active_file:939 inactive_file:938 isolated_file:142
[ 1938.228991]  unevictable:0 dirty:37 writeback:0 unstable:0
[ 1938.228991]  slab_reclaimable:19096 slab_unreclaimable:118711
[ 1938.228991]  mapped:53754 shmem:250 pagetables:32002 bounce:0
[ 1938.228991]  free:19467 free_pcp:178 free_cma:0
[ 1938.229004] Node 0 active_anon:1920952kB inactive_anon:768kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:4kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1938.229017] Node 1 active_anon:3370272kB inactive_anon:16kB active_file:3756kB inactive_file:3748kB unevictable:0kB isolated(anon):0kB isolated(file):568kB mapped:29024kB dirty:144kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1938.229020] Node 0 DMA free:10396kB min:220kB low:272kB high:324kB active_anon:4092kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1938.229052] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1938.229069] Node 0 DMA32 free:27380kB min:36272kB low:45340kB high:54408kB active_anon:1916860kB inactive_anon:768kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12224kB pagetables:40012kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1938.229085] lowmem_reserve[]: 0 0 0 0 0
[ 1938.229103] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1938.229118] lowmem_reserve[]: 0 0 0 0 0
[ 1938.229132] Node 1 Normal free:40092kB min:53612kB low:67012kB high:80412kB active_anon:3370228kB inactive_anon:16kB active_file:3660kB inactive_file:3776kB unevictable:0kB writepending:144kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30880kB pagetables:87972kB bounce:0kB free_pcp:712kB local_pcp:0kB free_cma:0kB
[ 1938.229147] lowmem_reserve[]: 0 0 0 0 0
[ 1938.229165] Node 0 DMA: 17*4kB (MEH) 65*8kB (UEH) 35*16kB (UMH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10396kB
[ 1938.229230] Node 0 DMA32: 232*4kB (UE) 168*8kB (UME) 412*16kB (UME) 188*32kB (UME) 20*64kB (UME) 8*128kB (UM) 6*256kB (ME) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 1*4096kB (M) = 27424kB
[ 1938.229291] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1938.229328] Node 1 Normal: 5*4kB (UMH) 186*8kB (UMEH) 96*16kB (UMEH) 387*32kB (UME) 107*64kB (UME) 11*128kB (UM) 66*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40580kB
[ 1938.229385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1938.229390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1938.229395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1938.229399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1938.229403] 2286 total pagecache pages
[ 1938.229412] 0 pages in swap cache
[ 1938.229416] Swap cache stats: add 0, delete 0, find 0/0
[ 1938.229419] Free swap  = 0kB
[ 1938.229421] Total swap = 0kB
[ 1938.229426] 1965979 pages RAM
[ 1938.229429] 0 pages HighMem/MovableOnly
[ 1938.229432] 339048 pages reserved
[ 1938.229434] 0 pages cma reserved
[ 1938.229440] Out of memory: Kill process 13285 (syz-executor.1) score 1007 or sacrifice child
[ 1938.229473] Killed process 13285 (syz-executor.1) total-vm:75228kB, anon-rss:16564kB, file-rss:34816kB, shmem-rss:0kB
[ 1938.337659] oom_reaper: reaped process 13285 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1939.014777] input: syz1 as /devices/virtual/input/input206
03:38:51 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x932}], 0x3)

03:38:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x932}], 0x3)

[ 1939.850433] input: syz1 as /devices/virtual/input/input207
03:38:52 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:52 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x0, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:52 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:52 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {0x0}, {&(0x7f00000006c0)="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", 0x932}], 0x3)

03:38:53 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:53 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x0, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:53 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:53 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1941.258846] input: syz1 as /devices/virtual/input/input209
03:38:54 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
socket(0x10, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r8 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r8, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r8, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:54 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:54 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:55 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:55 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:38:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="cc6140e255e8e411f2e2d500f92d7dd2f57e3552a4d91c28a8273dc0ebae3071ba8e5ae52d2e325ce39fd761c60a0df5a5f6312dd3133a2c2dbfa67e46f73f7a6c853f3d2dd8b16c78bf8502e5060de6ceeec75bc82a6e4004094077491ee8228436435dbb9f67b6711742f2f707d89108154953e739d148b6aab3cb6a02b2448c5598fa13a863baadec7d5173653caf9826a370e51bd0d0895620660cbf8131a996115295fcc8186588005d439bd550989d503951a80fc38725f46ec5a174d43644219b42da97f6eb7e890ed753245b4fb944b5c060f2827dd6d19d7b4087072adcd2647a706f513f6c1f23d205fac39b3eab457afca42eb537d619e2375c4a828dc1ef726e69ed7cb4ce897006de0ba53564ebc41ee4f598786fc2df7d6f90bde8b084955decee04a6e12b9891a4c7c0816b6253467d0f5b5d7a6578d38115477b2d05826485bde9313bb9c2e36f55dece59d699e860ae4740a87b83af4a3849c5a5142d1dec588dbe8b3d69799e4c2b94edf6b7206cd39ecb5c828ec09252b8355b7242999efc12d7cbad66291e951a4c64a819ad9a3628dd347bf6a6f77116e5bcdc38aeb7c313c845c1e3d33ba4d947df47c5ac31e4b0f3d131096aa952931bba6c2e751ae4795a5c727ef873bf5421dda582e3a4d7d42754acb0bff0395cca2a72b8a61e", 0x1e7}], 0x2)

03:38:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="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", 0x1e7}], 0x2)

03:38:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
writev(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f00000006c0)="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", 0x1e7}], 0x2)

[ 1943.973757] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1944.017558] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[ 1944.026806] CPU: 1 PID: 13399 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0
[ 1944.034734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1944.044093] Call Trace:
[ 1944.046700]  dump_stack+0x13e/0x194
[ 1944.050337]  dump_header+0x178/0x6d4
[ 1944.054055]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1944.059088]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1944.064180]  ? ___ratelimit+0x50/0x519
[ 1944.068060]  oom_kill_process.cold+0x10/0xae3
[ 1944.072579]  ? lock_downgrade+0x6e0/0x6e0
[ 1944.076727]  out_of_memory+0x2d5/0x1110
[ 1944.080692]  ? oom_killer_disable+0x1c0/0x1c0
[ 1944.085180]  ? mutex_trylock+0x152/0x1a0
[ 1944.089241]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1944.094078]  ? warn_alloc+0xf0/0xf0
[ 1944.097696]  ? find_held_lock+0x2d/0x110
[ 1944.101755]  ? fs_reclaim_acquire+0x10/0x10
[ 1944.106085]  __alloc_pages_nodemask+0x5d3/0x700
[ 1944.110862]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1944.115888]  ? find_held_lock+0x2d/0x110
[ 1944.119949]  ? cache_grow_begin+0x32d/0x410
[ 1944.124270]  cache_grow_begin+0x7b/0x410
[ 1944.128336]  ? __cpuset_node_allowed+0xfa/0x450
[ 1944.133002]  fallback_alloc+0x205/0x2b0
[ 1944.136980]  kmem_cache_alloc+0x1ea/0x770
[ 1944.141125]  ? find_held_lock+0x2d/0x110
[ 1944.145191]  ? __do_page_fault+0x4e4/0xb40
[ 1944.149424]  getname_flags+0xc8/0x560
[ 1944.153240]  user_path_at_empty+0x2a/0x50
[ 1944.157377]  SyS_chdir+0x79/0x190
[ 1944.160818]  ? SyS_access+0x680/0x680
[ 1944.164616]  ? do_syscall_64+0x4c/0x640
[ 1944.168590]  ? SyS_access+0x680/0x680
[ 1944.172395]  do_syscall_64+0x1d5/0x640
[ 1944.176374]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1944.181564] RIP: 0033:0x45ba37
[ 1944.184748] RSP: 002b:00007ffd9c701c38 EFLAGS: 00000246 ORIG_RAX: 0000000000000050
[ 1944.192448] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045ba37
[ 1944.199786] RDX: 0000000000000001 RSI: 000000000071fe90 RDI: 00007ffd9c701c80
[ 1944.207109] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000017b5940
[ 1944.214400] R10: 00000000017b5c10 R11: 0000000000000246 R12: 0000000000000000
[ 1944.221658] R13: 00007ffd9c701c70 R14: 0000000000000000 R15: 00007ffd9c701c80
[ 1944.248929] Mem-Info:
[ 1944.255191] active_anon:1325056 inactive_anon:196 isolated_anon:0
[ 1944.255191]  active_file:180 inactive_file:220 isolated_file:32
[ 1944.255191]  unevictable:0 dirty:43 writeback:0 unstable:0
[ 1944.255191]  slab_reclaimable:19223 slab_unreclaimable:118056
[ 1944.255191]  mapped:52556 shmem:250 pagetables:32012 bounce:0
[ 1944.255191]  free:19544 free_pcp:1 free_cma:0
[ 1944.326988] Node 0 active_anon:1922224kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185996kB dirty:8kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1944.379135] Node 1 active_anon:3378000kB inactive_anon:16kB active_file:100kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23228kB dirty:64kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1944.409832] Node 0 DMA free:10376kB min:220kB low:272kB high:324kB active_anon:4116kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1944.448217] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1944.457875] Node 0 DMA32 free:26732kB min:36272kB low:45340kB high:54408kB active_anon:1918108kB inactive_anon:768kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12192kB pagetables:40012kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[ 1944.548107] lowmem_reserve[]: 0 0 0 0 0
[ 1944.553222] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1944.581939] lowmem_reserve[]: 0 0 0 0 0
[ 1944.590099] Node 1 Normal free:47452kB min:53612kB low:67012kB high:80412kB active_anon:3370884kB inactive_anon:16kB active_file:224kB inactive_file:920kB unevictable:0kB writepending:108kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30976kB pagetables:88012kB bounce:0kB free_pcp:932kB local_pcp:644kB free_cma:0kB
[ 1944.621168] lowmem_reserve[]: 0 0 0 0 0
[ 1944.625189] Node 0 DMA: 14*4kB (UMEH) 64*8kB (UMEH) 35*16kB (UH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10376kB
[ 1944.641936] Node 0 DMA32: 205*4kB (UME) 212*8kB (UME) 409*16kB (UME) 185*32kB (UME) 7*64kB (UME) 8*128kB (M) 6*256kB (ME) 5*512kB (M) 2*1024kB (M) 0*2048kB 1*4096kB (M) = 26692kB
[ 1944.658175] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1944.681441] Node 1 Normal: 832*4kB (UM) 388*8kB (UMH) 185*16kB (UMH) 414*32kB (UMEH) 116*64kB (UM) 12*128kB (UME) 64*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47984kB
[ 1944.720112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1944.729018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1944.766888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1944.791074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1944.799961] 406 total pagecache pages
[ 1944.808593] 0 pages in swap cache
[ 1944.812128] Swap cache stats: add 0, delete 0, find 0/0
[ 1944.817836] Free swap  = 0kB
[ 1944.824744] Total swap = 0kB
[ 1944.827780] 1965979 pages RAM
[ 1944.830974] 0 pages HighMem/MovableOnly
[ 1944.834957] 339048 pages reserved
[ 1944.838407] 0 pages cma reserved
[ 1944.845747] Out of memory: Kill process 10258 (syz-executor.1) score 1007 or sacrifice child
[ 1944.864087] Killed process 10258 (syz-executor.1) total-vm:75096kB, anon-rss:16556kB, file-rss:34816kB, shmem-rss:0kB
[ 1945.100430] input: syz1 as /devices/virtual/input/input212
03:38:58 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
socket(0x10, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r8 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r8, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r8, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:58 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:58 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:58 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x0, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:58 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1945.775382] input: syz1 as /devices/virtual/input/input213
03:38:58 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
socket(0x10, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r8 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r8, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r8, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:58 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:58 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x0, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:58 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1946.133246] input: syz1 as /devices/virtual/input/input214
03:38:59 executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:38:59 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e280000", 0x15)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:59 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:59 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:38:59 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

[ 1947.440575] input: syz1 as /devices/virtual/input/input215
[ 1948.658837] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=1000
[ 1948.691918] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[ 1948.699389] CPU: 1 PID: 13538 Comm: syz-executor.3 Not tainted 4.14.171-syzkaller #0
[ 1948.707301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1948.716679] Call Trace:
[ 1948.719269]  dump_stack+0x13e/0x194
[ 1948.722886]  dump_header+0x178/0x6d4
[ 1948.726584]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1948.731582]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1948.736667]  ? ___ratelimit+0x50/0x519
[ 1948.740560]  oom_kill_process.cold+0x10/0xae3
[ 1948.745052]  ? lock_acquire+0x170/0x3f0
[ 1948.749015]  ? lock_downgrade+0x6e0/0x6e0
[ 1948.753159]  out_of_memory+0x2d5/0x1110
[ 1948.757130]  ? oom_killer_disable+0x1c0/0x1c0
[ 1948.761625]  ? mutex_trylock+0x152/0x1a0
[ 1948.765670]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1948.770502]  ? warn_alloc+0xf0/0xf0
[ 1948.774115]  ? find_held_lock+0x2d/0x110
[ 1948.778265]  ? fs_reclaim_acquire+0x10/0x10
[ 1948.782574]  __alloc_pages_nodemask+0x5d3/0x700
[ 1948.787241]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1948.792265]  ? find_held_lock+0x2d/0x110
[ 1948.796314]  ? cache_grow_begin+0x32d/0x410
[ 1948.800619]  cache_grow_begin+0x7b/0x410
[ 1948.804666]  ? __cpuset_node_allowed+0xfa/0x450
[ 1948.809321]  fallback_alloc+0x205/0x2b0
[ 1948.813454]  kmem_cache_alloc+0x1ea/0x770
[ 1948.817592]  getname_flags+0xc8/0x560
[ 1948.821379]  do_sys_open+0x1c4/0x3f0
[ 1948.825426]  ? filp_open+0x60/0x60
[ 1948.828958]  ? SyS_clock_settime+0x1a0/0x1a0
[ 1948.833528]  ? do_syscall_64+0x4c/0x640
[ 1948.837486]  ? SyS_open+0x30/0x30
[ 1948.840922]  do_syscall_64+0x1d5/0x640
[ 1948.844799]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1948.850145] RIP: 0033:0x45c449
[ 1948.853339] RSP: 002b:00007f1e8d63dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1948.861033] RAX: ffffffffffffffda RBX: 00007f1e8d63e6d4 RCX: 000000000045c449
[ 1948.868286] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c
[ 1948.875539] RBP: 000000000076c100 R08: 0000000000000000 R09: 0000000000000000
[ 1948.882791] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1948.890057] R13: 000000000000079c R14: 00000000004ca0d0 R15: 000000000076c10c
[ 1948.925689] Mem-Info:
[ 1948.928484] active_anon:1321488 inactive_anon:199 isolated_anon:0
[ 1948.928484]  active_file:152 inactive_file:108 isolated_file:32
[ 1948.928484]  unevictable:0 dirty:1 writeback:0 unstable:0
[ 1948.928484]  slab_reclaimable:19323 slab_unreclaimable:118122
[ 1948.928484]  mapped:52451 shmem:252 pagetables:31918 bounce:0
[ 1948.928484]  free:23042 free_pcp:204 free_cma:0
[ 1948.966934] Node 0 active_anon:1921692kB inactive_anon:768kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185996kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1948.999606] Node 1 active_anon:3364260kB inactive_anon:28kB active_file:596kB inactive_file:624kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:23908kB dirty:4kB writeback:0kB shmem:36kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1949.043164] Node 0 DMA free:10376kB min:220kB low:272kB high:324kB active_anon:4116kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1949.070039] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1949.075149] Node 0 DMA32 free:27568kB min:36272kB low:45340kB high:54408kB active_anon:1917576kB inactive_anon:768kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12160kB pagetables:40012kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[ 1949.104370] lowmem_reserve[]: 0 0 0 0 0
[ 1949.108368] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1949.133904] lowmem_reserve[]: 0 0 0 0 0
[ 1949.137898] Node 1 Normal free:54404kB min:53612kB low:67012kB high:80412kB active_anon:3364260kB inactive_anon:28kB active_file:280kB inactive_file:1000kB unevictable:0kB writepending:28kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30688kB pagetables:87636kB bounce:0kB free_pcp:320kB local_pcp:188kB free_cma:0kB
[ 1949.175818] lowmem_reserve[]: 0 0 0 0 0
[ 1949.180075] Node 0 DMA: 14*4kB (UMEH) 64*8kB (UMEH) 35*16kB (UH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10376kB
[ 1949.196547] Node 0 DMA32: 234*4kB (UME) 234*8kB (UME) 406*16kB (UME) 185*32kB (UME) 17*64kB (UME) 8*128kB (M) 6*256kB (ME) 5*512kB (M) 2*1024kB (M) 0*2048kB 1*4096kB (M) = 27576kB
[ 1949.212900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1949.223700] Node 1 Normal: 915*4kB (UMEH) 327*8kB (UME) 153*16kB (UME) 458*32kB (UMH) 227*64kB (UME) 13*128kB (UME) 62*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55444kB
[ 1949.239538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1949.248475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1949.257163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1949.266085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1949.275143] 360 total pagecache pages
[ 1949.278964] 0 pages in swap cache
[ 1949.294231] Swap cache stats: add 0, delete 0, find 0/0
[ 1949.340389] Free swap  = 0kB
[ 1949.347958] Total swap = 0kB
[ 1949.351236] 1965979 pages RAM
[ 1949.354482] 0 pages HighMem/MovableOnly
[ 1949.358635] 339048 pages reserved
[ 1949.362364] 0 pages cma reserved
[ 1949.365870] Out of memory: Kill process 13538 (syz-executor.3) score 1007 or sacrifice child
[ 1949.374786] Killed process 13538 (syz-executor.3) total-vm:75096kB, anon-rss:16552kB, file-rss:34816kB, shmem-rss:0kB
[ 1949.433966] oom_reaper: reaped process 13538 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
03:39:02 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:39:02 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:39:02 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0xfffbffffffffffff, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x85e, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, &(0x7f0000000400))
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002200)=""/50, 0x32}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, 0x0, &(0x7f0000000180))
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

03:39:02 executing program 4:
mkdir(&(0x7f0000001340)='./file0\x00', 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000180))
mount(&(0x7f0000000040)=ANY=[@ANYBLOB='[c::]:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0)
setregid(0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
tkill(r0, 0x1002000000013)

[ 1950.234520] input: syz1 as /devices/virtual/input/input216
[ 1951.469933] kdevtmpfs invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null),  order=1, oom_score_adj=0
[ 1951.507574] kdevtmpfs cpuset=/ mems_allowed=0-1
[ 1951.512381] CPU: 1 PID: 20 Comm: kdevtmpfs Not tainted 4.14.171-syzkaller #0
[ 1951.519591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1951.528957] Call Trace:
[ 1951.531575]  dump_stack+0x13e/0x194
[ 1951.535585]  dump_header+0x178/0x6d4
[ 1951.539317]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1951.544460]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1951.549582]  ? ___ratelimit+0x50/0x519
[ 1951.553494]  oom_kill_process.cold+0x10/0xae3
[ 1951.558007]  ? lock_acquire+0x170/0x3f0
[ 1951.561994]  ? lock_downgrade+0x6e0/0x6e0
[ 1951.566157]  out_of_memory+0x2d5/0x1110
[ 1951.570264]  ? oom_killer_disable+0x1c0/0x1c0
[ 1951.574856]  ? mutex_trylock+0x152/0x1a0
[ 1951.578950]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1951.583816]  ? warn_alloc+0xf0/0xf0
[ 1951.587471]  ? find_held_lock+0x2d/0x110
[ 1951.591545]  ? fs_reclaim_acquire+0x10/0x10
[ 1951.595887]  __alloc_pages_nodemask+0x5d3/0x700
[ 1951.600569]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1951.605607]  cache_grow_begin+0x7b/0x410
[ 1951.609675]  ? __cpuset_node_allowed+0xfa/0x450
[ 1951.614353]  fallback_alloc+0x205/0x2b0
[ 1951.618343]  kmem_cache_alloc+0x1ea/0x770
[ 1951.622503]  ? finish_task_switch+0x178/0x620
[ 1951.627010]  getname_kernel+0x4e/0x340
[ 1951.630911]  kern_path_create+0x1f/0x40
[ 1951.635152]  handle_create+0x95/0x4c0
[ 1951.638958]  ? finish_task_switch+0x178/0x620
[ 1951.643465]  ? switch_mm_irqs_off+0x5db/0xec0
[ 1951.647972]  ? dev_mount+0x30/0x30
[ 1951.651519]  ? find_held_lock+0x2d/0x110
[ 1951.655587]  ? devtmpfsd+0x1fa/0x460
[ 1951.659315]  ? lock_acquire+0x170/0x3f0
[ 1951.663586]  ? lock_downgrade+0x6e0/0x6e0
[ 1951.667746]  devtmpfsd+0x219/0x460
[ 1951.671300]  ? handle_create+0x4c0/0x4c0
[ 1951.675372]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[ 1951.680621]  ? handle_create+0x4c0/0x4c0
[ 1951.684767]  kthread+0x30d/0x420
[ 1951.688140]  ? kthread_create_on_node+0xd0/0xd0
[ 1951.692839]  ret_from_fork+0x24/0x30
[ 1951.720084] Mem-Info:
[ 1951.722576] active_anon:1321548 inactive_anon:199 isolated_anon:0
[ 1951.722576]  active_file:25 inactive_file:12 isolated_file:0
[ 1951.722576]  unevictable:0 dirty:1 writeback:0 unstable:0
[ 1951.722576]  slab_reclaimable:19274 slab_unreclaimable:118409
[ 1951.722576]  mapped:52242 shmem:251 pagetables:31949 bounce:0
[ 1951.722576]  free:23203 free_pcp:62 free_cma:0
[ 1951.757010] Node 0 active_anon:1921704kB inactive_anon:768kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1951.785388] Node 1 active_anon:3364488kB inactive_anon:28kB active_file:444kB inactive_file:376kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:23676kB dirty:4kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1951.814274] Node 0 DMA free:10376kB min:220kB low:272kB high:324kB active_anon:4116kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1951.859952] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1951.868889] Node 0 DMA32 free:27540kB min:36272kB low:45340kB high:54408kB active_anon:1917588kB inactive_anon:768kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12160kB pagetables:40012kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1951.898626] lowmem_reserve[]: 0 0 0 0 0
[ 1951.903305] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1951.929611] lowmem_reserve[]: 0 0 0 0 0
[ 1951.933682] Node 1 Normal free:54184kB min:53612kB low:67012kB high:80412kB active_anon:3364808kB inactive_anon:28kB active_file:120kB inactive_file:588kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30752kB pagetables:87760kB bounce:0kB free_pcp:44kB local_pcp:0kB free_cma:0kB
[ 1951.963351] lowmem_reserve[]: 0 0 0 0 0
[ 1951.967542] Node 0 DMA: 14*4kB (UMEH) 64*8kB (UMEH) 35*16kB (UH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10376kB
[ 1951.985478] Node 0 DMA32: 229*4kB (UME) 232*8kB (UME) 406*16kB (UME) 185*32kB (UME) 17*64kB (UME) 8*128kB (M) 6*256kB (ME) 5*512kB (M) 2*1024kB (M) 0*2048kB 1*4096kB (M) = 27540kB
[ 1952.002745] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1952.016648] Node 1 Normal: 720*4kB (UME) 608*8kB (UMEH) 165*16kB (UME) 395*32kB (UMH) 223*64kB (UMEH) 12*128kB (UME) 62*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54704kB
[ 1952.036946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1952.046409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1952.059720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1952.069377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1952.092177] 423 total pagecache pages
[ 1952.096545] 0 pages in swap cache
[ 1952.104936] Swap cache stats: add 0, delete 0, find 0/0
[ 1952.112515] Free swap  = 0kB
[ 1952.115686] Total swap = 0kB
[ 1952.118799] 1965979 pages RAM
[ 1952.124948] 0 pages HighMem/MovableOnly
[ 1952.129010] 339048 pages reserved
[ 1952.133977] 0 pages cma reserved
[ 1952.138256] Out of memory: Kill process 13540 (syz-executor.0) score 1007 or sacrifice child
[ 1952.159018] Killed process 13558 (syz-executor.0) total-vm:75360kB, anon-rss:16576kB, file-rss:34828kB, shmem-rss:0kB
[ 1952.260132] oom_reaper: reaped process 13558 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB
[ 1952.321936] input: syz1 as /devices/virtual/input/input217
[ 1952.680491] input: syz1 as /devices/virtual/input/input218
03:39:05 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
mkdir(0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

03:39:05 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:39:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0)
write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}}, 0xfe4f)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

03:39:05 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b06, &(0x7f0000000880)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x04\x00\x00\x00\x00\x00\x00@!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\xff\a\x00\x00\x00\x00\x00\x00\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
accept(0xffffffffffffffff, &(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0)
r4 = creat(0x0, 0x0)
r5 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x120000000000000, 0x1}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xe2e6}, r5, 0x0, 0xffffffffffffffff, 0x9)
mkdir(&(0x7f0000000740)='./file0\x00', 0x0)
io_submit(0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
connect(0xffffffffffffffff, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pipe(&(0x7f0000000200))
r6 = socket(0x10, 0x800, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001e00050a400ffe0000000000001695674eeb970000ac0180610f4f32bbc85eb8f6794fb900000000000000"], 0x1}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000003c0)={0xa30000, 0x0, 0x0, <r7=>r6, 0x0, 0x0})
ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe}, {0x6}, 0x8, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @local}, 'veth0_to_bond\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setresgid(0x0, 0x0, 0x0)
setresgid(0x0, 0x0, 0x0)
stat(0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040))
r8 = socket(0x10, 0x2, 0x0)
write(r8, 0x0, 0x0)
r9 = socket$inet6(0xa, 0x803, 0x2)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in, 0x0, 0x1, 0x0, 0xfc}}, 0xe8)
sendmmsg(r9, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x39}}], 0x400000000000107, 0x0)
recvmmsg(r9, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f0000002500)=[{0x0}, {&(0x7f0000002200)=""/50, 0x32}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)

[ 1953.136153] libceph: connect [c::]:6789 error -101
[ 1953.148130] libceph: mon0 [c::]:6789 connect error
[ 1953.321356] input: syz1 as /devices/virtual/input/input220
[ 1954.356551] input: syz1 as /devices/virtual/input/input219
[ 1954.473215] syz-executor.4: page allocation failure: order:5, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null)
[ 1954.495451] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[ 1954.509782] CPU: 0 PID: 13580 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0
[ 1954.517992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1954.527509] Call Trace:
[ 1954.530267]  dump_stack+0x13e/0x194
[ 1954.533926]  warn_alloc.cold+0x96/0x1af
[ 1954.537936]  ? zone_watermark_ok_safe+0x280/0x280
[ 1954.543017]  ? __alloc_pages_direct_compact+0xba/0x360
[ 1954.548327]  __alloc_pages_slowpath+0x2114/0x26c0
[ 1954.553207]  ? warn_alloc+0xf0/0xf0
[ 1954.556976]  ? find_held_lock+0x2d/0x110
[ 1954.561056]  ? fs_reclaim_acquire+0x10/0x10
[ 1954.565604]  __alloc_pages_nodemask+0x5d3/0x700
[ 1954.570468]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1954.575681]  ? find_held_lock+0x2d/0x110
[ 1954.579876]  ? cache_grow_begin+0x32d/0x410
[ 1954.584372]  cache_grow_begin+0x7b/0x410
[ 1954.588582]  ? __cpuset_node_allowed+0xfa/0x450
[ 1954.593448]  fallback_alloc+0x205/0x2b0
[ 1954.597448]  __kmalloc+0x214/0x7c0
[ 1954.601006]  ? mempool_create_node+0x2cd/0x3c0
[ 1954.605792]  ? __lockdep_init_map+0x100/0x560
[ 1954.610448]  ? mempool_resize+0x5d0/0x5d0
[ 1954.614743]  mempool_create_node+0x2cd/0x3c0
[ 1954.619417]  ceph_mount+0x6f9/0x15d8
[ 1954.623319]  mount_fs+0x92/0x2a0
[ 1954.626708]  vfs_kern_mount.part.0+0x5b/0x3c0
[ 1954.631224]  do_mount+0x3c9/0x24f0
[ 1954.634785]  ? copy_mount_string+0x40/0x40
[ 1954.639194]  ? __might_fault+0x177/0x1b0
[ 1954.643273]  ? _copy_from_user+0x94/0x100
[ 1954.647577]  ? memdup_user+0x54/0xa0
[ 1954.651296]  ? copy_mount_options+0x1ec/0x2e0
[ 1954.655791]  ? copy_mnt_ns+0x8a0/0x8a0
[ 1954.659780]  SyS_mount+0xa8/0x120
[ 1954.663233]  ? copy_mnt_ns+0x8a0/0x8a0
[ 1954.667329]  do_syscall_64+0x1d5/0x640
[ 1954.671229]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1954.676695] RIP: 0033:0x45c449
[ 1954.680009] RSP: 002b:00007f62e7946c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1954.687835] RAX: ffffffffffffffda RBX: 00007f62e79476d4 RCX: 000000000045c449
[ 1954.695448] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000040
[ 1954.702845] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1954.710124] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1954.717582] R13: 000000000000074a R14: 00000000004c9d14 R15: 000000000076bf2c
[ 1954.745822] Mem-Info:
[ 1954.748530] active_anon:1321159 inactive_anon:199 isolated_anon:0
[ 1954.748530]  active_file:11 inactive_file:112 isolated_file:32
[ 1954.748530]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1954.748530]  slab_reclaimable:19230 slab_unreclaimable:118749
[ 1954.748530]  mapped:52286 shmem:251 pagetables:31928 bounce:0
[ 1954.748530]  free:22894 free_pcp:215 free_cma:0
[ 1954.783091] Node 0 active_anon:1921704kB inactive_anon:768kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1954.811599] Node 1 active_anon:3362932kB inactive_anon:28kB active_file:240kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:23152kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[ 1954.839674] Node 0 DMA free:10376kB min:220kB low:272kB high:324kB active_anon:4116kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1954.875579] lowmem_reserve[]: 0 2557 2557 2557 2557
[ 1954.881203] Node 0 DMA32 free:27844kB min:36272kB low:45340kB high:54408kB active_anon:1917588kB inactive_anon:768kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2621276kB mlocked:0kB kernel_stack:12192kB pagetables:40012kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1954.911584] lowmem_reserve[]: 0 0 0 0 0
[ 1954.916539] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1954.946795] lowmem_reserve[]: 0 0 0 0 0
[ 1954.951063] Node 1 Normal free:53740kB min:53612kB low:67012kB high:80412kB active_anon:3362932kB inactive_anon:28kB active_file:0kB inactive_file:280kB unevictable:0kB writepending:0kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:30912kB pagetables:87676kB bounce:0kB free_pcp:724kB local_pcp:116kB free_cma:0kB
[ 1954.981424] lowmem_reserve[]: 0 0 0 0 0
[ 1954.986101] Node 0 DMA: 14*4kB (UMEH) 64*8kB (UMEH) 35*16kB (UH) 13*32kB (UMEH) 4*64kB (UMH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10376kB
[ 1955.004365] Node 0 DMA32: 271*4kB (UME) 255*8kB (UME) 405*16kB (UME) 184*32kB (UME) 17*64kB (UME) 8*128kB (M) 6*256kB (ME) 5*512kB (M) 2*1024kB (M) 0*2048kB 1*4096kB (M) = 27844kB
[ 1955.021767] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1955.033079] Node 1 Normal: 1770*4kB (UME) 658*8kB (UME) 195*16kB (UME) 271*32kB (UMH) 215*64kB (UMEH) 8*128kB (UME) 59*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54024kB
[ 1955.049231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1955.058350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1955.067265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1955.084320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1955.094852] 443 total pagecache pages
[ 1955.098797] 0 pages in swap cache
[ 1955.116180] Swap cache stats: add 0, delete 0, find 0/0
[ 1955.125495] Free swap  = 0kB
[ 1955.128794] Total swap = 0kB
[ 1955.133711] 1965979 pages RAM
[ 1955.137106] 0 pages HighMem/MovableOnly
[ 1955.144386] 339048 pages reserved
[ 1955.148102] 0 pages cma reserved
[ 1955.154593] ==================================================================
[ 1955.162530] BUG: KASAN: use-after-free in ceph_destroy_options+0xda/0x100
[ 1955.169640] Read of size 8 at addr ffff888078636c90 by task syz-executor.4/13580
[ 1955.177175] 
[ 1955.178797] CPU: 0 PID: 13580 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0
[ 1955.186671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1955.196026] Call Trace:
[ 1955.198613]  dump_stack+0x13e/0x194
[ 1955.202562]  ? ceph_destroy_options+0xda/0x100
[ 1955.207011] kdevtmpfs invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null)
[ 1955.207249]  print_address_description.cold+0x7c/0x1e2
[ 1955.216664] ,  order=1, oom_score_adj=0
[ 1955.221813]  ? ceph_destroy_options+0xda/0x100
[ 1955.221824]  kasan_report.cold+0xa9/0x2ae
[ 1955.221833]  ceph_destroy_options+0xda/0x100
[ 1955.221845]  ceph_mount+0xb6c/0x15d8
[ 1955.221860]  mount_fs+0x92/0x2a0
[ 1955.225817] kdevtmpfs cpuset=
[ 1955.230400]  vfs_kern_mount.part.0+0x5b/0x3c0
[ 1955.230412]  do_mount+0x3c9/0x24f0
[ 1955.230424]  ? copy_mount_string+0x40/0x40
[ 1955.230433]  ? __might_fault+0x177/0x1b0
[ 1955.230444]  ? _copy_from_user+0x94/0x100
[ 1955.230456]  ? memdup_user+0x54/0xa0
[ 1955.230463]  ? copy_mount_options+0x1ec/0x2e0
[ 1955.230470]  ? copy_mnt_ns+0x8a0/0x8a0
[ 1955.230479]  SyS_mount+0xa8/0x120
[ 1955.230485]  ? copy_mnt_ns+0x8a0/0x8a0
[ 1955.230499]  do_syscall_64+0x1d5/0x640
[ 1955.230516]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1955.230525] RIP: 0033:0x45c449
[ 1955.230532] RSP: 002b:00007f62e7946c78 EFLAGS: 00000246
[ 1955.235666] /
[ 1955.239074]  ORIG_RAX: 00000000000000a5
[ 1955.239080] RAX: ffffffffffffffda RBX: 00007f62e79476d4 RCX: 000000000045c449
[ 1955.239086] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000040
[ 1955.239091] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1955.239096] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1955.239102] R13: 000000000000074a R14: 00000000004c9d14 R15: 000000000076bf2c
[ 1955.260093]  mems_allowed=0-1
[ 1955.262003] 
[ 1955.266060] CPU: 1 PID: 20 Comm: kdevtmpfs Not tainted 4.14.171-syzkaller #0
[ 1955.270199] Allocated by task 13580:
[ 1955.273921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1955.278559]  save_stack+0x32/0xa0
[ 1955.282436] Call Trace:
[ 1955.286060]  kasan_kmalloc+0xbf/0xe0
[ 1955.286068]  kmem_cache_alloc_trace+0x14d/0x7b0
[ 1955.286076]  ceph_parse_options+0xb8/0xe80
[ 1955.286084]  ceph_mount+0x39f/0x15d8
[ 1955.286093]  mount_fs+0x92/0x2a0
[ 1955.286104]  vfs_kern_mount.part.0+0x5b/0x3c0
[ 1955.290005]  dump_stack+0x13e/0x194
[ 1955.293883]  do_mount+0x3c9/0x24f0
[ 1955.293891]  SyS_mount+0xa8/0x120
[ 1955.299117]  dump_header+0x178/0x6d4
[ 1955.302303]  do_syscall_64+0x1d5/0x640
[ 1955.307700]  ? trace_hardirqs_on_caller+0x3f6/0x590
[ 1955.309408]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1955.313545]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1955.320809] 
[ 1955.328080]  ? ___ratelimit+0x50/0x519
[ 1955.335339] Freed by task 13580:
[ 1955.342610]  oom_kill_process.cold+0x10/0xae3
[ 1955.349874]  save_stack+0x32/0xa0
[ 1955.352970]  ? lock_acquire+0x170/0x3f0
[ 1955.354586]  kasan_slab_free+0x75/0xc0
[ 1955.361760]  ? lock_downgrade+0x6e0/0x6e0
[ 1955.365462]  kfree+0xcb/0x260
[ 1955.374813]  out_of_memory+0x2d5/0x1110
[ 1955.378258]  ceph_destroy_client+0x90/0xb0
[ 1955.380831]  ? oom_killer_disable+0x1c0/0x1c0
[ 1955.384529]  ceph_mount+0xb45/0x15d8
[ 1955.389182]  ? mutex_trylock+0x152/0x1a0
[ 1955.393403]  mount_fs+0x92/0x2a0
[ 1955.393414]  vfs_kern_mount.part.0+0x5b/0x3c0
[ 1955.397137]  __alloc_pages_slowpath+0x1fbf/0x26c0
[ 1955.400500]  do_mount+0x3c9/0x24f0
[ 1955.405158]  ? warn_alloc+0xf0/0xf0
[ 1955.408776]  SyS_mount+0xa8/0x120
[ 1955.412341]  ? find_held_lock+0x2d/0x110
[ 1955.415881]  do_syscall_64+0x1d5/0x640
[ 1955.415895]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1955.419602]  ? fs_reclaim_acquire+0x10/0x10
[ 1955.423509] 
[ 1955.428534]  __alloc_pages_nodemask+0x5d3/0x700
[ 1955.433728] The buggy address belongs to the object at ffff888078636bc0
[ 1955.433728]  which belongs to the cache kmalloc-256 of size 256
[ 1955.438828]  ? __alloc_pages_slowpath+0x26c0/0x26c0
[ 1955.440438] The buggy address is located 208 bytes inside of
[ 1955.440438]  256-byte region [ffff888078636bc0, ffff888078636cc0)
[ 1955.444350]  ? find_held_lock+0x2d/0x110
[ 1955.447702] The buggy address belongs to the page:
[ 1955.452196]  ? cache_grow_begin+0x32d/0x410
[ 1955.455789] page:ffffea0001e18d80 count:1 mapcount:0 mapping:ffff888078636080 index:0x0
[ 1955.459818]  cache_grow_begin+0x7b/0x410
[ 1955.467962]  ? __cpuset_node_allowed+0xfa/0x450
[ 1955.471056] flags: 0xfffe0000000100(slab)
[ 1955.475078]  fallback_alloc+0x205/0x2b0
[ 1955.479302] raw: 00fffe0000000100 ffff888078636080 0000000000000000 000000010000000c
[ 1955.483799]  kmem_cache_alloc+0x1ea/0x770
[ 1955.487491] raw: ffffea00026c0920 ffffea00028353a0 ffff88812fe567c0 0000000000000000
[ 1955.491593]  ? __lock_acquire+0x5f7/0x4620
[ 1955.494951] page dumped because: kasan: bad access detected
[ 1955.499441]  getname_kernel+0x4e/0x340
[ 1955.504261] 
[ 1955.507801]  kern_path_locked+0x64/0x2b0
[ 1955.511407] Memory state around the buggy address:
[ 1955.511416]  ffff888078636b80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[ 1955.514861]  ? nd_jump_link+0x1d0/0x1d0
[ 1955.518906]  ffff888078636c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1955.522787]  ? __lock_acquire+0x5f7/0x4620
[ 1955.528126] >ffff888078636c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1955.532483]  handle_remove+0x95/0x670
[ 1955.534098]                          ^
[ 1955.538782]  ? cacheinfo_cpu_online.cold+0x2e/0x2e
[ 1955.551601]  ffff888078636d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1955.556802]  ? trace_hardirqs_on+0x10/0x10
[ 1955.568794]  ffff888078636d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1955.572857]  ? _raw_spin_unlock_irq+0x24/0x80
[ 1955.577770] ==================================================================
[ 1955.582088]  ? save_trace+0x290/0x290
[ 1955.590212] Disabling lock debugging due to kernel taint
[ 1955.594267]  ? _raw_spin_unlock_irq+0x5a/0x80
[ 1955.679339] Kernel panic - not syncing: panic_on_warn set ...
[ 1955.679339] 
[ 1955.681866]  ? finish_task_switch+0x178/0x620
[ 1955.751134]  ? finish_task_switch+0x14d/0x620
[ 1955.755807]  ? switch_mm_irqs_off+0x2c3/0xec0
[ 1955.760297]  ? find_held_lock+0x2d/0x110
[ 1955.764532]  ? devtmpfsd+0x1fa/0x460
[ 1955.768286]  ? lock_acquire+0x170/0x3f0
[ 1955.772289]  ? lock_downgrade+0x6e0/0x6e0
[ 1955.776430]  devtmpfsd+0x326/0x460
[ 1955.780010]  ? handle_create+0x4c0/0x4c0
[ 1955.784062]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[ 1955.789162]  ? handle_create+0x4c0/0x4c0
[ 1955.793266]  kthread+0x30d/0x420
[ 1955.796623]  ? kthread_create_on_node+0xd0/0xd0
[ 1955.801282]  ret_from_fork+0x24/0x30
[ 1955.804996] CPU: 0 PID: 13580 Comm: syz-executor.4 Tainted: G    B           4.14.171-syzkaller #0
[ 1955.814137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1955.823651] Call Trace:
[ 1955.826406]  dump_stack+0x13e/0x194
[ 1955.830051]  panic+0x1f9/0x42d
[ 1955.833254]  ? add_taint.cold+0x16/0x16
[ 1955.837242]  ? preempt_schedule_common+0x4a/0xc0
[ 1955.842009]  ? ceph_destroy_options+0xda/0x100
[ 1955.846603]  ? ___preempt_schedule+0x16/0x18
[ 1955.851133]  ? ceph_destroy_options+0xda/0x100
[ 1955.855724]  kasan_end_report+0x43/0x49
[ 1955.860203]  kasan_report.cold+0x12f/0x2ae
[ 1955.864478]  ceph_destroy_options+0xda/0x100
[ 1955.869029]  ceph_mount+0xb6c/0x15d8
[ 1955.869551] Mem-Info:
[ 1955.872749]  mount_fs+0x92/0x2a0
[ 1955.872759]  vfs_kern_mount.part.0+0x5b/0x3c0
[ 1955.872768]  do_mount+0x3c9/0x24f0
[ 1955.872777]  ? copy_mount_string+0x40/0x40
[ 1955.872787]  ? __might_fault+0x177/0x1b0
[ 1955.872797]  ? _copy_from_user+0x94/0x100
[ 1955.872806]  ? memdup_user+0x54/0xa0
[ 1955.872811]  ? copy_mount_options+0x1ec/0x2e0
[ 1955.872817]  ? copy_mnt_ns+0x8a0/0x8a0
[ 1955.872823]  SyS_mount+0xa8/0x120
[ 1955.872832]  ? copy_mnt_ns+0x8a0/0x8a0
[ 1955.877392] active_anon:1321340 inactive_anon:199 isolated_anon:0
[ 1955.877392]  active_file:18 inactive_file:19 isolated_file:0
[ 1955.877392]  unevictable:0 dirty:0 writeback:0 unstable:0
[ 1955.877392]  slab_reclaimable:19226 slab_unreclaimable:118724
[ 1955.877392]  mapped:52251 shmem:251 pagetables:31929 bounce:0
[ 1955.877392]  free:23010 free_pcp:186 free_cma:0
[ 1955.878611]  do_syscall_64+0x1d5/0x640
[ 1955.884879] Node 0 active_anon:1921704kB inactive_anon:768kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185992kB dirty:0kB writeback:0kB shmem:972kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 677888kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1955.886883]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1955.893439] Node 1 active_anon:3363656kB inactive_anon:28kB active_file:72kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23012kB dirty:0kB writeback:0kB shmem:32kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 2048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[ 1955.895325] RIP: 0033:0x45c449
[ 1955.902217] Node 0 
[ 1955.903427] RSP: 002b:00007f62e7946c78 EFLAGS: 00000246
[ 1955.907925] DMA free:10376kB min:220kB low:272kB high:324kB active_anon:4116kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:24kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1955.911865]  ORIG_RAX: 00000000000000a5
[ 1955.911870] RAX: ffffffffffffffda RBX: 00007f62e79476d4 RCX: 000000000045c449
[ 1955.911874] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000020000040
[ 1955.911878] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1955.911882] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1955.911885] R13: 000000000000074a R14: 00000000004c9d14 R15: 000000000076bf2c
[ 1955.913479] Kernel Offset: disabled
[ 1956.104144] Rebooting in 86400 seconds..