cketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:50:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xb8\x9f&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0x1d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0xc0189436, &(0x7f0000000080)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f0000000840)={&(0x7f0000002c00)={0xc8, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x67}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x88}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x8}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5226}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2004}, 0x80) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r3, 0x383e5512a1ca9246, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) getpeername$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x15}, @mcast2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}, 0x8000, 0x9, 0x9b, 0x400, 0x0, 0x800000, r6}) [ 1375.534464] lowmemorykiller: Killing 'syz-executor.1' (3334) (tgid 3334), adj 1000, [ 1375.534464] to free 52360kB on behalf of 'kswapd0' (33) because [ 1375.534464] cache 60912kB is below limit 65536kB for oom_score_adj 12 [ 1375.534464] Free memory is 1132kB above reserved 14:50:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r2 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x2) sendfile(r1, r2, 0x0, 0x4000000000020009) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200001e, 0x50, r3, 0xe8079000) 14:50:57 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x164, 0xffffffff) gettid() r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x33b330e, 0x9) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r8, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x8) fcntl$dupfd(r5, 0x406, r7) ioprio_set$pid(0x0, r0, 0x6) [ 1375.755446] audit: type=1400 audit(1575039057.432:93): avc: denied { execute } for pid=9101 comm="syz-executor.3" path="pipe:[162493]" dev="pipefs" ino=162493 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 14:50:57 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x200, 0x0) [ 1375.797256] lowmemorykiller: Killing 'syz-executor.1' (3352) (tgid 3352), adj 1000, [ 1375.797256] to free 52360kB on behalf of 'kswapd0' (33) because [ 1375.797256] cache 60832kB is below limit 65536kB for oom_score_adj 12 [ 1375.797256] Free memory is -6576kB above reserved [ 1375.810287] lowmemorykiller: Killing 'syz-executor.0' (3363) (tgid 3363), adj 1000, [ 1375.810287] to free 52360kB on behalf of 'kswapd0' (33) because [ 1375.810287] cache 60840kB is below limit 65536kB for oom_score_adj 12 14:50:57 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1375.810287] Free memory is -2944kB above reserved [ 1375.823735] lowmemorykiller: Killing 'syz-executor.1' (3377) (tgid 3377), adj 1000, [ 1375.823735] to free 52360kB on behalf of 'kswapd0' (33) because [ 1375.823735] cache 60852kB is below limit 65536kB for oom_score_adj 12 [ 1375.823735] Free memory is 10608kB above reserved 14:50:57 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(r2, 0x0, 0xfffffffffffffd9f, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:50:57 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@deltfilter={0x28, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x0, 0xa}}}, 0x3e3}}, 0x319fb9583abbf384) 14:50:58 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newae={0x40, 0x1e, 0x1, 0x0, 0x0, {{@in=@local}}}, 0x40}}, 0x0) [ 1376.266692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 14:50:58 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:50:58 executing program 4: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r3, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x5}, 0x0, 0x0, &(0x7f00000002c0)={0x4, 0xd, 0x5, 0x100}, &(0x7f0000000300)=0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x400}}, 0x10) r4 = fcntl$dupfd(r1, 0x0, r2) r5 = gettid() r6 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000014c0)='/selinux/create\x00', 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/load\x00', 0x2, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)) sendmmsg$unix(r4, &(0x7f0000008f80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x18, 0x1, 0x1, [r0, r6]}}], 0x38}], 0x1, 0x45) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) timerfd_gettime(r7, &(0x7f0000000000)) 14:50:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x75) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x31}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r6}]]}}}]}, 0x40}}, 0x0) 14:50:58 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440), 0xffffffffffffc92, 0x9) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000800)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:50:58 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x1420800a74, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16, @ANYPTR, @ANYRESOCT, @ANYRESDEC=r2, @ANYPTR64, @ANYRESOCT=r2], @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESOCT=0x0, @ANYRESDEC=r3], @ANYRESDEC, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES64=r5, @ANYRESDEC, @ANYRESDEC=r6], @ANYRESDEC, @ANYRES16=0x0, @ANYRES16=r7, @ANYRES16=0x0], 0x3e) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) [ 1376.610336] lowmemorykiller: Killing 'syz-executor.1' (9080) (tgid 9080), adj 1000, [ 1376.610336] to free 52396kB on behalf of 'kswapd0' (33) because [ 1376.610336] cache 60492kB is below limit 65536kB for oom_score_adj 12 [ 1376.610336] Free memory is -6572kB above reserved 14:50:58 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x200, 0x0) [ 1376.657904] lowmemorykiller: Killing 'syz-executor.1' (9128) (tgid 9128), adj 1000, [ 1376.657904] to free 52396kB on behalf of 'kswapd0' (33) because [ 1376.657904] cache 60492kB is below limit 65536kB for oom_score_adj 12 [ 1376.657904] Free memory is -9028kB above reserved [ 1376.686619] lowmemorykiller: Killing 'syz-executor.1' (9141) (tgid 9141), adj 1000, [ 1376.686619] to free 52368kB on behalf of 'kswapd0' (33) because [ 1376.686619] cache 60492kB is below limit 65536kB for oom_score_adj 12 [ 1376.686619] Free memory is 1264kB above reserved 14:50:58 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:50:58 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1377.004238] lowmemorykiller: Killing 'syz-executor.0' (3436) (tgid 3436), adj 1000, [ 1377.004238] to free 52360kB on behalf of 'kswapd0' (33) because [ 1377.004238] cache 60272kB is below limit 65536kB for oom_score_adj 12 [ 1377.004238] Free memory is -448kB above reserved [ 1377.045968] lowmemorykiller: Killing 'syz-executor.0' (3449) (tgid 3449), adj 1000, [ 1377.045968] to free 52360kB on behalf of 'kswapd0' (33) because [ 1377.045968] cache 60272kB is below limit 65536kB for oom_score_adj 12 [ 1377.045968] Free memory is 16528kB above reserved [ 1377.073977] lowmemorykiller: Killing 'syz-executor.0' (3483) (tgid 3483), adj 1000, [ 1377.073977] to free 52360kB on behalf of 'kswapd0' (33) because [ 1377.073977] cache 60272kB is below limit 65536kB for oom_score_adj 12 [ 1377.073977] Free memory is 32272kB above reserved 14:50:58 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(r2, 0x0, 0xfffffffffffffd9f, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:50:58 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/\v7op#\xfc', 0x0, 0x49847d) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x2000000000071, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000200)={{}, 'syz0\x00'}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2000, 0x5, 0x10, 0x0, "3956a21d47550c38e01fdd0cd65efa1ce27d7c1e851d3f222594afae8501bb11ae3a8f3d6067d1a415694d7d5337c83773e08133bb419a8848c95648558084cb", "63aa554774bf97a34a73ad9e4cdd41ad426d38d242b9672ee709f1e7c2084d33", [0x2000002]}) 14:50:59 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:50:59 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420800a74, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) futimesat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)={{r3, r4/1000+10000}, {0x0, 0x2710}}) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) r5 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0x7fff, @mcast1, 0xd9}}, 0x0, 0x2, 0x0, "01bbb0c96f825e3d80a6b29ac94ed684caeac655459d00bec63c1564c320ebe4fe56a873cf5f99e27355ad0ef21a3aff5d1eca122c31f72fb5d68c1cbbc89f31f51b1bafc5dd70d67c10540457ff3f25"}, 0xd8) fallocate(r0, 0x0, 0x0, 0x8020003) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpuset.effective_cpus\x00') 14:50:59 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0x8, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x810, r15, 0x806e7000) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:50:59 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r2 = inotify_init1(0x80000) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace(0x4207, r5) ptrace$peeksig(0x4209, r5, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r7, 0xfffffffffffffffb, 0x40) ptrace(0x4207, r7) ptrace$peeksig(0x4209, r7, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) tgkill(r5, r7, 0x29) ptrace$peeksig(0x4209, r3, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) rt_tgsigqueueinfo(r5, r3, 0x15, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) 14:50:59 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0) [ 1377.505119] lowmemorykiller: Killing 'syz-executor.0' (3499) (tgid 3499), adj 1000, [ 1377.505119] to free 52360kB on behalf of 'kswapd0' (33) because [ 1377.505119] cache 60152kB is below limit 65536kB for oom_score_adj 12 [ 1377.505119] Free memory is -6684kB above reserved [ 1377.620993] lowmemorykiller: Killing 'syz-executor.0' (3515) (tgid 3515), adj 1000, [ 1377.620993] to free 52360kB on behalf of 'syz-executor.0' (9245) because [ 1377.620993] cache 59852kB is below limit 65536kB for oom_score_adj 12 [ 1377.620993] Free memory is -11504kB above reserved 14:50:59 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440), 0xffffffffffffc92, 0x9) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000800)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1377.627740] lowmemorykiller: Killing 'syz-executor.0' (3515) (tgid 3515), adj 1000, [ 1377.627740] to free 52360kB on behalf of 'modprobe' (9264) because [ 1377.627740] cache 59652kB is below limit 65536kB for oom_score_adj 12 [ 1377.627740] Free memory is -11404kB above reserved [ 1377.629767] lowmemorykiller: Killing 'syz-executor.0' (3515) (tgid 3515), adj 1000, [ 1377.629767] to free 52360kB on behalf of 'syz-executor.4' (9244) because [ 1377.629767] cache 59652kB is below limit 65536kB for oom_score_adj 12 [ 1377.629767] Free memory is -11404kB above reserved [ 1377.631351] lowmemorykiller: Killing 'syz-executor.0' (3541) (tgid 3541), adj 1000, [ 1377.631351] to free 52360kB on behalf of 'syz-executor.3' (9243) because [ 1377.631351] cache 59552kB is below limit 65536kB for oom_score_adj 12 [ 1377.631351] Free memory is -11304kB above reserved [ 1377.634163] lowmemorykiller: Killing 'syz-executor.0' (3541) (tgid 3541), adj 1000, [ 1377.634163] to free 52360kB on behalf of 'syz-executor.4' (9244) because [ 1377.634163] cache 59452kB is below limit 65536kB for oom_score_adj 12 [ 1377.634163] Free memory is -4504kB above reserved 14:50:59 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1377.637570] lowmemorykiller: Killing 'syz-executor.0' (3559) (tgid 3559), adj 1000, [ 1377.637570] to free 52360kB on behalf of 'modprobe' (9264) because [ 1377.637570] cache 59352kB is below limit 65536kB for oom_score_adj 12 [ 1377.637570] Free memory is -2604kB above reserved [ 1377.638608] lowmemorykiller: Killing 'syz-executor.0' (3559) (tgid 3559), adj 1000, [ 1377.638608] to free 52360kB on behalf of 'syz-executor.3' (9243) because [ 1377.638608] cache 59452kB is below limit 65536kB for oom_score_adj 12 [ 1377.638608] Free memory is -4504kB above reserved 14:51:00 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0) [ 1377.653659] lowmemorykiller: Killing 'syz-executor.0' (3541) (tgid 3541), adj 1000, [ 1377.653659] to free 52360kB on behalf of 'syz-executor.0' (9245) because [ 1377.653659] cache 59452kB is below limit 65536kB for oom_score_adj 12 [ 1377.653659] Free memory is -11204kB above reserved 14:51:00 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, 0x0, r9, 0x0, 0x1420800a74, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) splice(r10, 0x0, r11, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r10, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) splice(r12, 0x0, r13, 0x0, 0x1420800a74, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r14, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r14, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r16 = socket$nl_route(0x10, 0x3, 0x0) splice(r15, 0x0, r16, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r15, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r18 = socket$nl_route(0x10, 0x3, 0x0) splice(r17, 0x0, r18, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r17, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r20 = socket$nl_route(0x10, 0x3, 0x0) splice(r19, 0x0, r20, 0x0, 0x1420800a74, 0x0) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=r3], @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES32=0x0, @ANYRES64=r5], @ANYRES64=r6, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYRESDEC=r20], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES64, @ANYRESDEC, @ANYRES16, @ANYRES32=r10], @ANYRES64=r2, @ANYRES16=0x0, @ANYRESDEC=0x0], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="17a4a9798edf0a76620bcd38a161046441362878fae74d8922c76d6155e2c59f617230f72bd374771b656c122560de2a2e8644d9fb438fb8e2b9d6649cb992c548f7c83b9089daf7d776f48b6befc39f884e010ad102c31ef0cdfe13ca9ee210eba1e7be2b5edd0c631b4836a5402b28270971cba1ed468fcf9003c792e69546b3adc51e211176d7e4b9290efcd6c6c8ff29b177fefbe9dae33344056ec40c588db031cb41fd93ae6a5fc8ab715e5b5032d1e84e104f803b06f07f1fd4be4da2135afe3007a42f235facee7e69762bd9af7c3ae0009eaf90acc16b04f8a11cbf23e96348512140fe45fc8629633c7f207153a854d9", @ANYRES16, @ANYRESOCT=r13, @ANYRES16=r14, @ANYBLOB="61834562ae094e12ba34804893f25912e0b16aade76b5ecf120a053dbab6bd0532603cde42d4629b3b5ff691d520b7"]], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESDEC=r15], @ANYRES64=r17], 0x2c) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x34041, 0x0) [ 1377.668174] lowmemorykiller: Killing 'syz-executor.0' (3568) (tgid 3568), adj 1000, [ 1377.668174] to free 52360kB on behalf of 'modprobe' (9264) because [ 1377.668174] cache 59352kB is below limit 65536kB for oom_score_adj 12 [ 1377.668174] Free memory is 876kB above reserved 14:51:00 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r1, 0x2) dup3(r4, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x8) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000200)=0xffffffff) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) tkill(r0, 0x1000000000016) 14:51:00 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) splice(r11, 0x0, r12, 0x0, 0x1420800a74, 0x0) dup3(r0, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r14 = socket$nl_route(0x10, 0x3, 0x0) splice(r13, 0x0, r14, 0x0, 0x1420800a74, 0x0) readv(r14, 0x0, 0x209) r15 = socket$inet(0x2, 0x0, 0x0) syncfs(r15) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r16, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r17 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r17, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r17, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r18 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r19 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r19) r20 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r21 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r21, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r20, 0x4c00, r21) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r19, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r19, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r23, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r26, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r26, r24, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r18, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r22, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r20, r21, 0x0, 0x180003) [ 1377.674949] lowmemorykiller: Killing 'syz-executor.0' (3568) (tgid 3568), adj 1000, [ 1377.674949] to free 52360kB on behalf of 'syz-executor.0' (9245) because [ 1377.674949] cache 59252kB is below limit 65536kB for oom_score_adj 12 [ 1377.674949] Free memory is 15528kB above reserved 14:51:00 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000)="bfac3e724dc3263f4db9f5ffa08d760c6f7cfcec926ae928b47d05f1cea7add963616937ff5f10aff07187d7071569abd787fbb2eceadde7f5f074ff3575f1f6442b6c7b9de0fcb6b89bf845a4a3e31f315e1456a0b059fa0c1a13dc9e4a5e0b369992a31c", &(0x7f0000000080)="20c511219c14164b112bbc2c7a68385440ed77cde436e296e45cb7253249309a606828d146fbb710e25a16c62ae4f2", 0x5}, 0x20) 14:51:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4207, r4) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r6, 0x0, 0x0) ptrace(0x4207, r6) ptrace$peeksig(0x4209, r6, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r8, 0x0, 0x0) ptrace(0x4207, r8) ptrace$peeksig(0x4209, r8, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) ptrace$peeksig(0x4209, r8, &(0x7f0000000200)={0x0, 0x2fbccbe6af6d094f, 0xfffffffffffffeea}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r9, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, r9, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) getpgrp(r10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r11, 0x8923, &(0x7f0000000700)={'eql:\xb3\x87\x00\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_flags=0x3301}) 14:51:00 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1378.716871] : renamed from eql 14:51:00 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000040)={0x101, 0x3, 0x35b296de, 0x6, 0x1ff, 0x4}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r4 = dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace(0x4207, r5) ptrace$peeksig(0x4209, r5, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) ptrace(0x4207, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:51:00 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:00 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:00 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0) 14:51:01 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:01 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:01 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd6}, {&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:01 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) write$UHID_INPUT2(r2, &(0x7f00000003c0)={0xc, 0x48, "c368a67b3ca486a2b617814790395a8b613fc0645b7f24b67649bfab0d03eb14a722645338958980e79080cb9b6ffb5e66a9bdac8ae539a7394dce40ddef1a0a1d7b496767e7938b"}, 0x4e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000002000000", @ANYRES32=r9, @ANYBLOB="08000200e000000238489d4aff2c2461bf01a07ca92469a363a3ccfb6bdc43fcb38a5380c97b272039b15228849bd9545eaf370aa01a6c184a"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, @xdp={0x2c, 0x2, r9, 0x1e}, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @ethernet={0x6, @random="2508ba1b6a15"}, 0x3ad0, 0x0, 0x0, 0x0, 0x69d9, &(0x7f0000000080)='netpci0\x00', 0x4, 0xc18, 0x80}) r10 = syz_open_pts(r3, 0x1) r11 = dup(r3) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000140)={0xffff, 0x403}) fcntl$setstatus(r10, 0x4, 0x102800) write(r10, &(0x7f0000000000)="d5", 0x1000001be) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) splice(r12, 0x0, r13, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r12, 0x4004556d, 0x8) ioctl$NS_GET_OWNER_UID(r12, 0xb704, &(0x7f0000000440)) [ 1379.671177] lowmemorykiller: Killing 'syz-executor.4' (9230) (tgid 9230), adj 1000, [ 1379.671177] to free 52408kB on behalf of 'kswapd0' (33) because [ 1379.671177] cache 46108kB is below limit 65536kB for oom_score_adj 12 [ 1379.671177] Free memory is -6620kB above reserved 14:51:01 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000000)={0x4f, 0x1, 0xff80, 0xffff, 0x40}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:51:01 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r9, r8, 0x0) dup3(r9, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x2, 0x0, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:51:01 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r23 = socket$nl_route(0x10, 0x3, 0x0) splice(r22, 0x0, r23, 0x0, 0x1420800a74, 0x0) read(r23, &(0x7f0000000800)=""/254, 0x10000028e) sendfile(r16, r17, 0x0, 0x180003) [ 1379.804942] lowmemorykiller: Killing 'syz-executor.0' (9301) (tgid 9301), adj 1000, [ 1379.804942] to free 52392kB on behalf of 'kswapd0' (33) because [ 1379.804942] cache 46108kB is below limit 65536kB for oom_score_adj 12 [ 1379.804942] Free memory is -6992kB above reserved 14:51:01 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x20080) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getrusage(0xffffffffffffffff, &(0x7f00000018c0)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="46922fbd7000fddbdf25100000000800050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) getresgid(&(0x7f0000001980), &(0x7f00000019c0), &(0x7f0000001a00)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000180)={0x1, 0x17, 0xe73}) r2 = socket$unix(0x1, 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000200)={{0x10b, 0x3, 0xc0, 0x390, 0x93, 0x413, 0x260, 0x5}, "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", [[], [], [], []]}, 0x17a) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001680)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000001880)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000001840)={&(0x7f00000016c0)={0x144, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xda}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1d8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x2000}, 0x61) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f0000000140)='\x00') 14:51:01 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 14:51:01 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r9, r8, 0x0) dup3(r9, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x2, 0x0, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 1380.018391] lowmemorykiller: Killing 'syz-executor.3' (9413) (tgid 9413), adj 1000, [ 1380.018391] to free 52420kB on behalf of 'kswapd0' (33) because [ 1380.018391] cache 46112kB is below limit 65536kB for oom_score_adj 12 [ 1380.018391] Free memory is -7376kB above reserved [ 1380.095687] lowmemorykiller: Killing 'syz-executor.1' (9410) (tgid 9410), adj 1000, [ 1380.095687] to free 52384kB on behalf of 'kswapd0' (33) because [ 1380.095687] cache 45936kB is below limit 65536kB for oom_score_adj 12 [ 1380.095687] Free memory is 40kB above reserved [ 1380.128715] lowmemorykiller: Killing 'syz-executor.1' (3593) (tgid 3593), adj 1000, [ 1380.128715] to free 52360kB on behalf of 'kswapd0' (33) because [ 1380.128715] cache 45936kB is below limit 65536kB for oom_score_adj 12 [ 1380.128715] Free memory is 16128kB above reserved 14:51:02 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r9, r8, 0x0) dup3(r9, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x2, 0x0, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:51:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x201a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0\x00\x00\x00\f\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000006c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7c, r2}) connect$inet6(r0, &(0x7f0000000040), 0x248) sendmmsg(r0, &(0x7f000000ac80), 0x800000000000226, 0x0) 14:51:02 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="0400cd80"], 0x4}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x0}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:51:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000000c0)={0x1, 0x4, 0xeb0a}) dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='auxv\x00') read(r3, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0xdcd7b986f0b20eb2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @rand_addr=0x7ffffffc}}) 14:51:02 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xa8, 0x1e, 0x7a656b4924b660cb, 0x70bd2d, 0x25dfdbfd, {0xd}, [@typed={0x8, 0x76, @pid=r0}, @generic="f46b1a18591cf35e023f5015edb0f3d292fa84f1cf63f8473d93850c1365417e7e55bd87228a8c4320e7e892d18d9c624fc781f4d63c1beedb7e73b13ad51f280d21fbe9c25fd0b3feefabcb87a4992fd2ac0fc089c210f5197f4b23507601f037576202d6ab7fa2c775029b3229bdd0dd172d7beede77548a1952feff17935f7d64857befa1851a45a2a26e"]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x2000) ptrace$getregset(0x8, r0, 0x0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x0) 14:51:02 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/199) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'ipddp0\x00', 0x9}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x28, &(0x7f0000000200)}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x5a4000, 0x0) epoll_wait(r2, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0xfffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000300)={0x2, 0x70, 0x20, 0xff, 0xe0, 0xff, 0x0, 0x79082549, 0x870, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x8, @perf_config_ext={0x0, 0x7fff}, 0x21010, 0x6, 0x1000, 0xe, 0x57d8, 0x80000001, 0x2}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x10000, {{0xa, 0x4e23, 0x8b4, @ipv4={[], [], @local}, 0x9}}, {{0xa, 0x4e20, 0x600, @remote, 0x1000}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/dev_mcast\x00') ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x8000000000000000) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000540)=0x80000) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000580)={0x10000}, 0x8) fcntl$dupfd(r5, 0x406, r2) r6 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x4000, 0x68) fcntl$setsig(r6, 0xa, 0x13) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x485b3a1c8892190f, &(0x7f0000000600), &(0x7f0000000640)=0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x12, &(0x7f0000000680)=""/170, &(0x7f0000000740)=0xaa) perf_event_open(&(0x7f0000000780)={0x0, 0x70, 0xf1, 0x1, 0x40, 0x20, 0x0, 0x3, 0x8000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x6, 0x401}, 0x20000, 0x4, 0x1, 0x7, 0x1ff000000000, 0x10000, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$fou(&(0x7f0000000800)='fou\x00') r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x500984a0}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x100}, 0x440c0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ppp\x00', 0x88000, 0x0) pipe2(&(0x7f00000009c0)={0xffffffffffffffff}, 0x0) setsockopt$inet_mreq(r8, 0x0, 0x683788ae7f430b08, &(0x7f0000000a00)={@remote, @multicast1}, 0x8) r9 = perf_event_open(&(0x7f0000000a40)={0x6, 0x70, 0x6, 0x6, 0x0, 0x3, 0x0, 0x1000, 0x1c1, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x712fdb75}, 0x2000, 0x5, 0x10001, 0x0, 0x5, 0x5, 0xfff}, 0x0, 0x5, 0xffffffffffffffff, 0x9) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000ac0)=0x8, 0xfe7) 14:51:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @local, 0x8}, 0x45d30766d962522a) socketpair(0x8, 0xa, 0x2, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000040)="6046d2e43ae7ac7c85dc9a61139bd3f16897ce9271f16423e0173e9e8c4034ce07741ab831c044145cb09c749751c867997308da05a85a15fc94ddb9126ae289e50e711783eb8254438c902e1ad92b94a6bd4c052a1eb9a4fd01eeb0", 0x5c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000340)={{0x2, 0x4e21, @remote}, {0x6, @dev={[], 0x11}}, 0x2, {0x2, 0x4e21, @multicast2}, 'syz_tun\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c002000", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fddbdf25100000000800050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000240)={0xe, 0x8, 0x1f, 0x5, 0xa3, "c18c4406ae41b36304f54536deaea397961f72a1cccd027424e2358fc0e3342aaa36ffeba9b8cf821def9752f7801c3594fed13054dfb0034ff8337e811abfeefca16be70d0c7072093ee536622043e0a652a6ea1e201994a9501ab78b921bcabfed9dd29247b60c531001ada742e95c084189192e0eacf163b07555639ea9679a0e7fd138d06dcaccf0ca890e3aa9809391f8d1b5ebf808f0b30d27b0926815982e7d"}, 0xaf) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x0, 0x8c320fdbf35f869d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr="874960d6ef16215d346e6857f45539af", 0x0, 0x32}, 0x0, @in=@dev}}, 0xe8) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x1420800a74, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f00000003c0)={{0x0, 0x0, @identifier="6ec1ab40b99cbcc15da885a3aae15a12"}}) sendmmsg(r0, &(0x7f0000008880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:51:02 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:02 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:02 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r9, r8, 0x0) dup3(r9, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x2, 0x0, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:51:02 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) [ 1380.861896] lowmemorykiller: Killing 'syz-executor.1' (3637) (tgid 3637), adj 1000, [ 1380.861896] to free 52360kB on behalf of 'kswapd0' (33) because [ 1380.861896] cache 45952kB is below limit 65536kB for oom_score_adj 12 [ 1380.861896] Free memory is -6972kB above reserved [ 1380.993023] lowmemorykiller: Killing 'syz-executor.0' (3651) (tgid 3651), adj 1000, [ 1380.993023] to free 52360kB on behalf of 'kswapd0' (33) because [ 1380.993023] cache 45852kB is below limit 65536kB for oom_score_adj 12 [ 1380.993023] Free memory is -11812kB above reserved 14:51:02 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1380.995187] lowmemorykiller: Killing 'syz-executor.0' (3690) (tgid 3690), adj 1000, [ 1380.995187] to free 52360kB on behalf of 'syz-executor.3' (9552) because [ 1380.995187] cache 45852kB is below limit 65536kB for oom_score_adj 12 [ 1380.995187] Free memory is -11400kB above reserved 14:51:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000001c0)={0x1, {{0xa, 0x4e22, 0xffffff81, @dev={0xfe, 0x80, [], 0x29}, 0x80}}, 0x0, 0x3, [{{0xa, 0x4e21, 0x7f, @mcast1}}, {{0xa, 0x4e23, 0x9, @mcast1, 0x80000000}}, {{0xa, 0x4e23, 0xffffffc0, @rand_addr="f1dad0c8abe6170e2932c2fda72aa4a9", 0x7}}]}, 0x210) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002c00)=ANY=[@ANYBLOB="240000002c00000029000032000000ff02000000000000000000000000000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000080)=0x1c) [ 1380.999717] lowmemorykiller: Killing 'syz-executor.1' (3708) (tgid 3708), adj 1000, [ 1380.999717] to free 52360kB on behalf of 'syz-executor.3' (9552) because [ 1380.999717] cache 45752kB is below limit 65536kB for oom_score_adj 12 [ 1380.999717] Free memory is -2420kB above reserved [ 1381.042019] lowmemorykiller: Killing 'syz-executor.0' (3725) (tgid 3725), adj 1000, [ 1381.042019] to free 52360kB on behalf of 'syz-executor.0' (9547) because [ 1381.042019] cache 45496kB is below limit 65536kB for oom_score_adj 12 [ 1381.042019] Free memory is 11124kB above reserved [ 1381.059828] lowmemorykiller: Killing 'syz-executor.1' (3734) (tgid 3734), adj 1000, [ 1381.059828] to free 52360kB on behalf of 'syz-executor.0' (9547) because [ 1381.059828] cache 45496kB is below limit 65536kB for oom_score_adj 12 14:51:03 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000800)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r24 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r25, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r25, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) splice(r23, 0x0, r25, 0x0, 0xa50, 0x0) r26 = syz_open_pts(0xffffffffffffffff, 0x8200) sendfile(r24, r26, 0x0, 0x180003) 14:51:03 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340), 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x0, 0x8000, 0x0, 0x101}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) pipe(&(0x7f0000000000)) syz_open_dev$loop(0x0, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) bind$packet(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x3) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) dup3(r2, r5, 0x80000) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) read(r3, &(0x7f0000000300)=""/240, 0x50c7eb1b) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f0000000000), 0x4) [ 1381.059828] Free memory is 26360kB above reserved [ 1381.327697] lowmemorykiller: Killing 'syz-executor.3' (9552) (tgid 9552), adj 1000, [ 1381.327697] to free 52424kB on behalf of 'kswapd0' (33) because [ 1381.327697] cache 45484kB is below limit 65536kB for oom_score_adj 12 [ 1381.327697] Free memory is 49472kB above reserved 14:51:03 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420800a74, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) 14:51:03 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:03 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 14:51:03 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x0) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000001c0)={0x1, {{0xa, 0x4e22, 0xffffff81, @dev={0xfe, 0x80, [], 0x29}, 0x80}}, 0x0, 0x3, [{{0xa, 0x4e21, 0x7f, @mcast1}}, {{0xa, 0x4e23, 0x9, @mcast1, 0x80000000}}, {{0xa, 0x4e23, 0xffffffc0, @rand_addr="f1dad0c8abe6170e2932c2fda72aa4a9", 0x7}}]}, 0x210) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000002c00)=ANY=[@ANYBLOB="240000002c00000029000032000000ff02000000000000000000000000000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f0000000080)=0x1c) 14:51:03 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x0) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:03 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f0000000380)="62278203006ff18615bacd0b7fc6945fb28ddb6377c8ffff439b56e297ce74", 0x12}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:03 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) r2 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='/selinux/enforce\x00', 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000001c0)="66cde43d75835fbd648f42fa631c285db34b93cf3e628df0ffe624378b1920828dca006efd3adb3b868fe817cbc2c67a1c805efafd54b0d4df0aae321517a9fda8daba2ba4555b9fb2649e59d8867edaca0251f504b8f768cbfcbf895b88553c5e865ab413b9505ba322bd8110a8721180d562cc53995917d6962afc48a0ba5d469690e48004009da68c61474be979143c4f40bf4fd12fe3cf0b00207d79ecf7adde4386e1d5297648c45fe88302742558690fa9aa56d943d43582711450a4f13f8098ef8858c5", 0xc7, 0xfffffffffffffffc) keyctl$link(0x8, r2, r3) [ 1382.318038] lowmemorykiller: Killing 'syz-executor.0' (9570) (tgid 9570), adj 1000, [ 1382.318038] to free 52392kB on behalf of 'kswapd0' (33) because [ 1382.318038] cache 45492kB is below limit 65536kB for oom_score_adj 12 [ 1382.318038] Free memory is -6996kB above reserved 14:51:04 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340), 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x0, 0x8000, 0x0, 0x101}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0xd432}) pipe(0x0) pipe(&(0x7f0000000000)) syz_open_dev$loop(0x0, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x81ff) bind$packet(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000001640)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x3) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, 0x2710}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) dup3(r2, r5, 0x80000) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) read(r3, &(0x7f0000000300)=""/240, 0x50c7eb1b) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f0000000000), 0x4) 14:51:04 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x0) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1382.424941] lowmemorykiller: Killing 'syz-executor.1' (9544) (tgid 9544), adj 1000, [ 1382.424941] to free 52384kB on behalf of 'kswapd0' (33) because [ 1382.424941] cache 45392kB is below limit 65536kB for oom_score_adj 12 [ 1382.424941] Free memory is -2784kB above reserved [ 1382.511219] lowmemorykiller: Killing 'syz-executor.1' (9590) (tgid 9590), adj 1000, [ 1382.511219] to free 52376kB on behalf of 'kswapd0' (33) because [ 1382.511219] cache 45392kB is below limit 65536kB for oom_score_adj 12 [ 1382.511219] Free memory is 7748kB above reserved 14:51:04 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd6}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000000800)=""/200, 0xfffffffffffffd7a}, {&(0x7f0000001b00)=""/68, 0xfffffffffffffe71}], 0x6) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:04 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x3fffffffffffccb, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4422, 0x4) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x8) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000001200)=0x9, 0x4) getsockopt$inet6_mreq(r6, 0x29, 0x23, &(0x7f0000001140)={@loopback}, &(0x7f0000001180)=0x14) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r12}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000002000000", @ANYRES32=r12, @ANYBLOB="08000200e000000238489d4aff2c2461bf01a07ca92469a363a3ccfb6bdc43fcb38a5380c97b272039b15228849bd9545eaf370aa01a6c184a"], 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r12}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendto$packet(r5, &(0x7f0000000140)="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", 0x1000, 0x6004085, &(0x7f00000011c0)={0x11, 0xf8, r12, 0x1, 0xff, 0x6, @random="9471d652eda3"}, 0xfffffffffffffea8) writev(r1, &(0x7f00000023c0), 0x10000000000003ff) r13 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r13, 0x0, 0x483, &(0x7f00000026c0), &(0x7f0000002740)=0x68) 14:51:04 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r9, r8, 0x0) dup3(r9, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x2, 0x0, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:51:04 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff}) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xffffffffffffffe3) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) [ 1383.082198] lowmemorykiller: Killing 'syz-executor.1' (9652) (tgid 9652), adj 1000, [ 1383.082198] to free 52376kB on behalf of 'kswapd0' (33) because [ 1383.082198] cache 45336kB is below limit 65536kB for oom_score_adj 12 [ 1383.082198] Free memory is -6764kB above reserved [ 1383.203498] lowmemorykiller: Killing 'syz-executor.1' (9675) (tgid 9675), adj 1000, [ 1383.203498] to free 52376kB on behalf of 'kswapd0' (33) because [ 1383.203498] cache 45240kB is below limit 65536kB for oom_score_adj 12 [ 1383.203498] Free memory is -11944kB above reserved 14:51:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/926], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="46922feb0e0000000000000000000000000700000000e0a1fde76790f71665a052019e973c5c954aea3f10b69632524c725bcef2fabc9f321c4c1867dba30bcc5c05c1b2c8e0c9f1559c67a9b92859e35ee1397de9960ae5f133d15da04d82502efa8c725d73d730691205a1911f2dcf2414ff5c291fa9fe4bfef0ac2c86cc60f15967cc263d8fcbd6b5084d9b492b"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) getpeername$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x1420800a74, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x4) read(r1, &(0x7f0000000080)=""/100, 0x64) [ 1383.310141] lowmemorykiller: Killing 'syz-executor.1' (3760) (tgid 3760), adj 1000, [ 1383.310141] to free 52360kB on behalf of 'kswapd0' (33) because [ 1383.310141] cache 45240kB is below limit 65536kB for oom_score_adj 12 [ 1383.310141] Free memory is -2536kB above reserved 14:51:05 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) r11 = dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet(0x2, 0x0, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r15 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r16 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r18 = socket$nl_route(0x10, 0x3, 0x0) splice(r17, 0x0, r18, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r17, 0x4004556d, 0x8) close(r17) r19 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r20 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r20, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r19, 0x4c00, r20) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r16, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r22, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) fstat(r11, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r25, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r25, r23, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r21, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r19, r20, 0x0, 0x180003) 14:51:05 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r9, r8, 0x0) dup3(r9, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x2, 0x0, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 1383.688244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9702 comm=syz-executor.3 14:51:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x40, 0x1, 0x1, "76809f6ffb6ddaaf7f26dc1aef3e5f248563b4da3668cbb0ea0b9095ab1ae4318973ddff198d4b6f20231c"}], 0x40}}], 0x1, 0x0) prctl$PR_MCE_KILL_GET(0x22) [ 1383.751431] lowmemorykiller: Killing 'syz-executor.0' (9713) (tgid 9713), adj 1000, [ 1383.751431] to free 52392kB on behalf of 'kswapd0' (33) because [ 1383.751431] cache 45188kB is below limit 65536kB for oom_score_adj 12 [ 1383.751431] Free memory is -5032kB above reserved 14:51:05 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v2={0x31695b80d191e9e2, 0x0, 0xb, 0x6, 0xab, "78be93558d6bb03992654a43788548c2c340cbf5962087f43059d17b278f5e873c76ee3f7f3195b293e72c2ba43badd0861397c9e4d73c3fe3ae070e94f38f48a822269540e19706a0094db45b978917422edf2ca25f3ba571fb841f6e4177ae5c896b248942cab88323d2667c5ed60326e9124d75f650327ddf5c19220d6c589fca84e1d1c078b850d2e0b998fc32fa9ab130c5684e834c08aeacc5fd0441ced5b7d053518dc95633ea03"}, 0xb5, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x10, r3, 0xe1698000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x400009080400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, r4) keyctl$chown(0x4, r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, r5) r6 = socket$inet(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setreuid(0xffffffffffffffff, r7) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r7, r8) r9 = add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="47802fb778da7180c89b38a54321b770149ce47b1bf72465dc5db1b7e29d24b7230aa8aa87", 0x25, r5) keyctl$instantiate(0xc, r4, &(0x7f00000001c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:'}, 0x16, r9) 14:51:05 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r9, r8, 0x0) dup3(r9, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x2, 0x0, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:51:05 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x6, 0x3) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000200)="ccbbc572064c4dc165483b6eb60d713d27d0a919ca9ac38c99f3a1c319c786e10d71d142f2a195e090733cd1afc127671254c67adf7d7aaf1b3e9ddcdc95a150e793567c90209d456efe96d8be4515f3da5f306304445bdedf20d39c82f6e0310979ea08bb24469bbec885e0a6ba15aebb0ba748fc3883a1199b29fcd5d15a8be7f47ab8a07bbf15581055f676120574fa0606fada357f90df19c1529aa72d8a0a9d74a938438151e7bb8c744831d73ae27f79ab7823cf7b2fd1055f0157ca77faeec8c7886834d4d4a2a425e33748c86a790c1916f6654ec4d4e55abd8787867a474c9b5eea3af4d1de") poll(0x0, 0x0, 0xffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x80000000016, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000040)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000000)={0x18, 0x1, 0x0, {0xfff}}, 0x18) ptrace$getregset(0x8, 0x0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x10000, 0x0) [ 1384.087461] lowmemorykiller: Killing 'syz-executor.1' (9696) (tgid 9696), adj 1000, [ 1384.087461] to free 52384kB on behalf of 'kswapd0' (33) because [ 1384.087461] cache 45116kB is below limit 65536kB for oom_score_adj 12 [ 1384.087461] Free memory is -4524kB above reserved 14:51:05 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000680)='/dev/keychord\x00', 0x2000, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000006c0)={0x5, 0x5, 0xfffc}) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmsg(r1, &(0x7f0000000640)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x7fffd8ef, @my=0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ccc37e70fb298f0793b4bc603141c324b418ecd7843b2a46dad5d78a5f801af6dad8e99514992e434a4960ec4583730e78a076fb6aad8d1a7be05db339098b4bdf3e70643b0f22339e630f2cd14a0d1eba8a9d1697a339726a013fe78247fdcd48d8f92c8fff8ffe8c43c97ff0623344a69ffd3ec9963e2134846693e2a7066bdaa20ee8c8ea0ef5a836988e9a962494c569bf04228d1610672e2f7c4c48ce63ee72c3c01bcc4d4f27085686d52492eae666d0b878fd9f5f64264aa7489f001c7480920c048b7d37ac5d1b3264b3e03d466bdb0ce952e7937938dadc8fa4765305b2aa23aad5da93074f", 0xea}, {&(0x7f00000001c0)="1c0857c00e866a396b1aad75b07e072846483441e79908b5f5cede2efc58d9927406c57db8", 0x25}, {&(0x7f0000000240)="b11db8d4396aebbbfa2e7a165e232d5c87b842c259ca957069a9cdb8e3c6189ba8e08e71822e9615175b30d9779ece7c7fb4780fbc44b20ca8ef913f2f745fd575f536be65b99c261c5fe771325f0b11907ccb83798d6de47cc6637853545904b8d46e246157fab453ad883c6add7c7e257fe8ffd272855043a7949ecb0e3d942ba3dbca8340f29d990c6a73", 0x8c}], 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2f0}, 0x4004041) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x5, 0x4) sendmmsg(r1, &(0x7f0000008880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:51:05 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x11, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000000)=0x1, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r3, 0x0) pipe(&(0x7f0000000400)) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r4 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x402) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0x323) mlockall(0x0) r5 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000040)=0x7fffffff) r7 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r7, 0x1, 0x39, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$FUSE_POLL(r4, &(0x7f0000000540)={0xffffffffffffffc0, 0xfffffffffffffffe, 0x1}, 0x18) r8 = socket(0x10, 0x80002, 0x0) timer_create(0x1, &(0x7f0000000340)={0x0, 0x34, 0x0, @thr={0x0, &(0x7f0000000300)="5dd1fe141a30375709aa184e1f1d"}}, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r5) bind$netlink(r8, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x8001002}, 0xc) write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) sendto(r8, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000780), 0x2bb1f36c7597d46, 0x2, 0x0) sendfile(r4, r7, &(0x7f0000000140), 0x8fff) 14:51:06 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000800)=""/250, 0xfa) sendfile(r16, r17, 0x0, 0x180003) [ 1384.302017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9793 comm=syz-executor.5 14:51:06 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, 0xffffffffffffffff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:06 executing program 3: setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) [ 1384.637557] lowmemorykiller: Killing 'syz-executor.1' (3795) (tgid 3795), adj 1000, [ 1384.637557] to free 52360kB on behalf of 'kswapd0' (33) because [ 1384.637557] cache 45116kB is below limit 65536kB for oom_score_adj 12 [ 1384.637557] Free memory is -6904kB above reserved 14:51:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e1d, @remote}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000100)=""/76) gettid() r2 = inotify_init1(0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x1) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$peeksig(0x4209, r3, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x1, r3}) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000280)="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", 0xfffffffffffffdb2, 0x400c0de, 0x0, 0x0) 14:51:06 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$peeksig(0x4209, r3, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace(0x4207, r5) ptrace$peeksig(0x4209, r5, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) ptrace$getregset(0x8, r0, 0x1b5c1dcf1fa753dd, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:51:06 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, 0xffffffffffffffff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1384.892203] lowmemorykiller: Killing 'syz-executor.0' (3797) (tgid 3797), adj 1000, [ 1384.892203] to free 52360kB on behalf of 'kswapd0' (33) because [ 1384.892203] cache 45016kB is below limit 65536kB for oom_score_adj 12 [ 1384.892203] Free memory is -2668kB above reserved 14:51:06 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x334) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1385.087004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=9804 comm=syz-executor.5 14:51:07 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44400) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1385.295705] lowmemorykiller: Killing 'syz-executor.0' (3820) (tgid 3820), adj 1000, [ 1385.295705] to free 52360kB on behalf of 'kswapd0' (33) because [ 1385.295705] cache 44908kB is below limit 65536kB for oom_score_adj 12 [ 1385.295705] Free memory is -1016kB above reserved 14:51:07 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, 0xffffffffffffffff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1385.494002] lowmemorykiller: Killing 'syz-executor.1' (3821) (tgid 3821), adj 1000, [ 1385.494002] to free 52360kB on behalf of 'kswapd0' (33) because [ 1385.494002] cache 44808kB is below limit 65536kB for oom_score_adj 12 [ 1385.494002] Free memory is -1420kB above reserved 14:51:07 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000580)=0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) r5 = syz_open_pts(r3, 0x0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x23) waitid(0x1, r2, &(0x7f00000005c0), 0xbfa404f094a67ecd, &(0x7f0000000640)) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x61) write$uinput_user_dev(r6, &(0x7f0000000d00)={'syz0\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd]}, 0x45c) write$uinput_user_dev(r6, &(0x7f0000000100)={'syz1\x00', {0x5, 0x6, 0x2, 0x600}, 0x1d, [0x35ad, 0x80000000, 0x1, 0x9, 0x2, 0x81ff, 0x2, 0x3ff, 0x3, 0x5, 0xac3e, 0x8, 0x8, 0x1, 0x4, 0x4, 0xfdf9, 0x4, 0xfffff000, 0x4, 0x6, 0xfffffffb, 0x1, 0x16d, 0x7, 0x9, 0x3, 0x7ff, 0x3, 0x83aa, 0x5, 0x3ff, 0x6, 0x7, 0x9, 0xffffffc1, 0x9, 0x1000, 0x2, 0x80, 0x8, 0x4, 0x8001, 0x3, 0x2, 0x8, 0x1, 0x8000, 0x8, 0x7fffffff, 0x7fff, 0xfffffffb, 0x5, 0x1, 0x8, 0x151e, 0x1, 0x7, 0x2742, 0x80000000, 0x0, 0x8, 0x5], [0x2, 0xffffffff, 0x5, 0x9, 0x0, 0x81, 0x0, 0x8, 0x0, 0x7fff, 0x19b2, 0x5, 0x4, 0x10000, 0x1, 0x5, 0xe8d, 0x105a, 0x3, 0x1, 0x8001, 0x6, 0x7f, 0x80000000, 0x3, 0x8, 0x9, 0x3, 0x9, 0x4, 0x6, 0x401, 0xff, 0x3, 0xfffffffe, 0x5546fa65, 0x2, 0x7, 0x505, 0x1, 0x1, 0x1, 0x800, 0x3, 0xe134, 0xfbe1, 0x4, 0x8, 0x3, 0x3f, 0x5, 0x8, 0x3, 0xffff, 0xffffffc0, 0x0, 0x1, 0x81, 0x0, 0x9, 0x5, 0xbbd, 0x3, 0x9], [0x4b2, 0x401, 0xb0, 0x101, 0x4, 0x1f, 0x6, 0x1, 0x97, 0x4, 0xff, 0x200, 0x4, 0xffff, 0x4, 0x1000, 0x101, 0x8, 0x80000000, 0x8, 0x6, 0xfffffff8, 0x45, 0xd2fb, 0x5, 0x3, 0xffffff80, 0xffffffff, 0x7, 0x2, 0x0, 0x5, 0x6, 0xffffff81, 0x1, 0xfffffffa, 0x3, 0x6, 0x9, 0x8000, 0x3ff, 0x1, 0x401, 0x6, 0x6, 0x40, 0x6, 0xe4, 0x3, 0x38, 0xff, 0x9, 0x8000, 0x2239, 0x9, 0x80, 0x0, 0x40, 0x8, 0xfffffff9, 0x80000001, 0xc444, 0x4, 0x7], [0xf17, 0x0, 0x0, 0x80000000, 0x2, 0x6, 0x5, 0x7f, 0x2, 0x7f, 0x4, 0x7, 0xfffffbff, 0x2c, 0x6fc1, 0x6, 0x6, 0x3f, 0x400, 0x2c74, 0x7, 0xc4, 0x1, 0x0, 0xe6, 0x7, 0x7b9, 0x7, 0xfffffffa, 0x80000000, 0xa05e, 0x3, 0x9, 0x7, 0x9, 0x8, 0x2, 0xfffffff8, 0xff, 0x0, 0x4, 0x1f, 0x200, 0x1, 0x9, 0x7f, 0x8, 0x3, 0x8001, 0x80000000, 0x800, 0x800, 0x0, 0xeb, 0x1000, 0x1, 0x8, 0x1, 0xfc0, 0x2, 0x1, 0x8, 0x3, 0x1]}, 0x45c) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, &(0x7f0000000080)=0x705, 0x4) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) write$input_event(r6, &(0x7f0000000000)={{0x0, 0x7530}, 0x15, 0x61}, 0x18) 14:51:07 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000a1aff7)={@dev={0xfe, 0x80, [], 0x26}}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/\xdc\xbdv/netIvun\x00', 0x90202, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) r7 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x600) timerfd_settime(r7, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x2001, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r11, r10, 0x0) dup3(r11, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet(0x2, 0x0, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x8, {0x2, 0x0, @loopback}, 'team0\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000400)={{0x2, 0x0, @multicast1}, {}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r15 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r16 = open(&(0x7f0000000500)='./bus\x00', 0x200, 0x0) close(r16) r17 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r18 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r18, &(0x7f0000000440), 0x10000000000000ff, 0x81003) ioctl$LOOP_CHANGE_FD(r17, 0x4c00, r18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r16, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r20, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x97) keyctl$get_persistent(0x3, r23, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2160, {0x0, 0x1, 0x7}, 0x100010114, r23, r21, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x5, 0x0, 0x7, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r19, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r17, r18, 0x0, 0x180003) [ 1385.788209] input: syz1 as /devices/virtual/input/input61 [ 1385.864236] lowmemorykiller: Killing 'syz-executor.1' (9848) (tgid 9848), adj 1000, [ 1385.864236] to free 52384kB on behalf of 'kswapd0' (33) because [ 1385.864236] cache 44836kB is below limit 65536kB for oom_score_adj 12 [ 1385.864236] Free memory is -7088kB above reserved [ 1385.935812] lowmemorykiller: Killing 'syz-executor.1' (9867) (tgid 9867), adj 1000, [ 1385.935812] to free 52384kB on behalf of 'syz-executor.1' (9889) because [ 1385.935812] cache 44836kB is below limit 65536kB for oom_score_adj 12 [ 1385.935812] Free memory is -13348kB above reserved [ 1385.940132] lowmemorykiller: Killing 'syz-executor.0' (3905) (tgid 3905), adj 1000, [ 1385.940132] to free 52360kB on behalf of 'syz-executor.1' (9889) because [ 1385.940132] cache 44636kB is below limit 65536kB for oom_score_adj 12 [ 1385.940132] Free memory is 1252kB above reserved [ 1385.947784] lowmemorykiller: Killing 'syz-executor.1' (3904) (tgid 3904), adj 1000, [ 1385.947784] to free 52360kB on behalf of 'syz-executor.5' (9799) because [ 1385.947784] cache 44736kB is below limit 65536kB for oom_score_adj 12 [ 1385.947784] Free memory is -13148kB above reserved [ 1385.956417] lowmemorykiller: Killing 'syz-executor.1' (3936) (tgid 3936), adj 1000, [ 1385.956417] to free 52360kB on behalf of 'syz-executor.1' (9889) because [ 1385.956417] cache 44636kB is below limit 65536kB for oom_score_adj 12 [ 1385.956417] Free memory is 2952kB above reserved [ 1385.958422] lowmemorykiller: Killing 'syz-executor.0' (3938) (tgid 3938), adj 1000, [ 1385.958422] to free 52360kB on behalf of 'syz-executor.5' (9799) because [ 1385.958422] cache 44536kB is below limit 65536kB for oom_score_adj 12 [ 1385.958422] Free memory is 22440kB above reserved [ 1385.975311] lowmemorykiller: Killing 'syz-executor.0' (3993) (tgid 3993), adj 1000, [ 1385.975311] to free 52360kB on behalf of 'syz-executor.5' (9799) because [ 1385.975311] cache 44536kB is below limit 65536kB for oom_score_adj 12 [ 1385.975311] Free memory is 32540kB above reserved [ 1385.986463] lowmemorykiller: Killing 'syz-executor.1' (3998) (tgid 3998), adj 1000, [ 1385.986463] to free 52360kB on behalf of 'blkid' (9890) because [ 1385.986463] cache 44436kB is below limit 65536kB for oom_score_adj 12 [ 1385.986463] Free memory is 53136kB above reserved [ 1386.510989] input: syz1 as /devices/virtual/input/input62 14:51:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x8103, &(0x7f0000000440)) 14:51:08 executing program 3: r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008081, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000700)="ed", 0x1, 0x8000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00000000c0)="19", 0x1, 0x0, 0x0, 0x0) 14:51:08 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:08 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) getdents64(r1, &(0x7f0000000000)=""/94, 0x5e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x14, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x1420800a74, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x8) write$binfmt_elf64(r3, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="bed324e7d5ab7b0143731878f49d7ef0b576cce0cc1a44737fa3f7f4fb1212ea53ab5b37e76ddd083fc6b0ca6464d579d22eba630c7842cba986068082d06ab4aa1ec233371cd1ae029d4dc9cf89bd5ee04f5a9bd50770b5d443ad162519206325e9d193980736a6bfde22b067b918c5ab99de52241143f2e31bcf", @ANYRES32=r5], @ANYBLOB="3d448b42734a4b", @ANYRES64=r6, @ANYRESDEC=r7, @ANYBLOB="8c9eacc52c13c9d4c2915b82f17b908af93f6a990a458af0c1061c7e6bb40e81eb63df98b1f3684e4a456c1ea05c3bcd23537479b15f66dcc3789d1c13493dbd60d28fb9d10c", @ANYPTR, @ANYRES64, @ANYBLOB="02eff8ae46a7442c369b170992d7fcb7af857e35f5601de5693d6c8c6a46450b39bc3956b221e9e26b502da7b79d604d35d9390d2c96124a646b1db2a647555c3d"], 0xd6) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, 0x0, r9, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) splice(r10, 0x0, r11, 0x0, 0x1420800a74, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r12, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r14 = socket$nl_route(0x10, 0x3, 0x0) splice(r13, 0x0, r14, 0x0, 0x1420800a74, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT=r14], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000380)=0x1, 0x4) ptrace(0x10, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r15, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r15, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6e9ae2040000000080903eac9fe64a989d0481c80c7ef5cc75d603b9ec4e88a430b9fd3f6dfa6d06c05907d4b519d4080c9ab103afcb1385003aec1ea1fa62a2be2ccb60085bbaa1e2c6000000006092af55c0", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fddbdf25100000000800050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r16 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(r15, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r16, 0xc9adb6496ff07454, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xe34bcb776b2da3c7}, @FOU_ATTR_TYPE={0x0, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x3c}}, 0x40800) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r18 = socket$nl_route(0x10, 0x3, 0x0) splice(r17, 0x0, r18, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r17, 0x4004556d, 0x8) setsockopt$IP_VS_SO_SET_ADD(r17, 0x0, 0x482, &(0x7f00000000c0)={0x1d, @local, 0x4e23, 0x2, 'dh\x00', 0x1, 0x4, 0xf}, 0x2c) pipe(&(0x7f0000000340)) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00#\x00\x0e\xaeFQ\xcd\x84Q\x03\x00', 0x2000, 0x0) 14:51:08 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:51:08 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000380)='\x9b\xe5') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00@\x00\x00\x00\xb3\xe4\xd3=\t\xdc\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:08 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2, 0x17a) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x1420800a74, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) splice(r9, 0x0, r10, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x8) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0xfffffffffffffec2) 14:51:08 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) mkdirat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x1ff) close(r0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:51:08 executing program 5: unshare(0x400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pwritev(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420800a74, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f00000001c0)) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') 14:51:08 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:08 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @random="9201f30f5da3"}, 0x0, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:08 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x534aedf091050b93, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:51:09 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:09 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0xffffffffffffffb9) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:09 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='4']}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) 14:51:09 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_FP_MODE(0x2d, 0x2) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:51:09 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80300, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007fff) r3 = dup(r1) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) sendfile(r5, r4, 0x0, 0xd79) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) 14:51:09 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) pwritev(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x4081808) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20020102000007) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x0, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000100)) tkill(0x0, 0x800000000002e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) io_setup(0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x18) write$cgroup_type(r3, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x0, 0x70, 0x92, 0xd0, 0x80, 0x3, 0x0, 0x202, 0x20414, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, @perf_bp={&(0x7f0000000080), 0x3}, 0x80, 0x8, 0xffffffff, 0x8, 0x1000, 0x4, 0x8}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) [ 1387.853556] lowmemorykiller: Killing 'syz-executor.1' (9931) (tgid 9931), adj 1000, [ 1387.853556] to free 52396kB on behalf of 'kswapd0' (33) because [ 1387.853556] cache 44240kB is below limit 65536kB for oom_score_adj 12 [ 1387.853556] Free memory is -6796kB above reserved 14:51:09 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="ae07e552e22e66c2686f855a58c359c7776619aeec061ead6e9dc6fc3cf71a8c54c6d095e81df967a702a6969cbe647b24d6734d2df4466b9ec6dfe90d1e8ca9e27027a2b16f9670ed51ef3ef89ecb50f4199d16c35c3f959e646ea544be29fb3b50b939cb21e652deb59b7ced234a205647db5c135776e2518e83b238af1fc83c3e34ef3a696665c4e6de017908d5028bdf52879b0fc852c3b6b65a7332ea54835bb7c33acfa0b974f7517fd689fed6b5e6f06b9cfc02da97ef2216a98384f68207f86afbc27889797e0c7bc91f472be3816ce38356043901568e5cd43c1d23ab5c6c3c23df040b6724cbc2", 0xec}, {&(0x7f00000002c0)="ed6d3ce07fb58e6637a3d03861a6c3597166f73900f085941bc1ba15078a43e0442931fc908effd83253579e604e7f02c9b866a36d4951fae1a2929de5c96e8f3c2b5107075c6a528e18737c4acd92a718f19d37f5e9daa8dd44052b8cfaa636932c3204c23484fcb38b431ab50cf540c25ac43844aaeef64556bacfa2faaad15e6e86f1edbab0a6dd2365f1fe5d115f381602c0e4f903a2571b3ac8b62151fd40383a078d7a78fd41f7c27178558b78c319f96145ea784b68ea17300b2e4b30365e355d238252591969da5412eae37a", 0xd0}, {&(0x7f0000000080)="914aabe6904489b07156bfb5ec9d860ac59e315ecd81600ebb8075da2b379655b8b76a856aaf7d2f8b55c83740de1b5b20ee79f5e131395e3249d92c7928fc6ed37af0329c33f4dee5e3bf4a9956efc62a0d79a499166b099cb9fed62cc89db5c745092574d64132fd2b164d409c819c8ca52c2ab0f445e975f176def361be", 0x7f}], 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x6, 0x5, 0x5, 0x40, 0x9}) close(r0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:51:09 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000002000000", @ANYRES32=r8, @ANYBLOB="08000200e000000238489d4aff2c2461bf01a07ca92469a363a3ccfb6bdc43fcb38a5380c97b272039b15228849bd9545eaf370aa01a6c184a"], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0", r8}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x304) r11 = timerfd_create(0x0, 0x0) timerfd_settime(r11, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r11, r10, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x7) dup3(r13, r12, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r15, r14, 0x0) dup3(r15, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r16 = socket$inet(0x2, 0x0, 0x0) syncfs(r16) r17 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r17, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r18 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r18, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r18, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r19 = syz_open_dev$mice(&(0x7f0000000200)='/\x00', 0x0, 0x2c6600) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r20 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r20) r21 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r22 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r22, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r21, 0x4c00, r22) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r20, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r20, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r24, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r27, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r27, r25, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r19, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r23, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r21, r22, 0x0, 0x180003) [ 1387.989105] lowmemorykiller: Killing 'syz-executor.1' (9957) (tgid 9957), adj 1000, [ 1387.989105] to free 52396kB on behalf of 'blkid' (10060) because [ 1387.989105] cache 43740kB is below limit 65536kB for oom_score_adj 12 [ 1387.989105] Free memory is -13164kB above reserved 14:51:09 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) writev(r3, &(0x7f0000001540)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="b1804b1b543e85b93a1f11b01c343f9f2e14ce8f8b4188af0fbb47e22fbe15db633e94d8472f1f75850986fb29f87e86bd1633b885edbcc7207514ce2922951328ae36a5f81eb638922249f1e9b18b9a062fb58f9679df02b022cad3085386d14a8978a6a242065bc7c1d8926ffcbd4f0d7ca5425df0c920006889a42cad6090054395131b0f1591c4c7c4dc98384890bc6dfb5c51cd8ef3f785946750187e7d789d9fd14f68d2f9e69a1bbc2d55e8ec4e01dc4f4e3bc555f2c8b1d21813f1c5151fbed766884d", 0xc7}, {&(0x7f0000000000)="c04a1bd3181e68fecfd6984334447b89aeb3d5ef1d7ea52d78be9865408a5a1453d375d3b3f4fc4052bcaef7cb19e3ed2c0dee8b2bc548ddf1429136939127892eb9ac3b5a9bfe303386303166a5dd5bc0319a5f9bef4aef8cb955573192ca344ac1f31163e024cf35272149656c4444b0b190e80a6dce92317eba8cd349dcd1", 0x80}, {&(0x7f00000012c0)="222cc8d483e972b1752b6e1148025f3648c8565cafb84666da49f1190dddfdf653a7186ef3b583160eba508e05e2002b8ed62970e159b75aea5d813a529bd82cf72a50542f6715ceed892cf9aa9839a1373f3c675931c7dec6aace1a23265be2cd997027a7965fdbd9b0e713dc70d6db90bbbc94535b02db569f0f594fee2973e0bf4c6c9d900c20640c6b4b45813054e2b618f3c29eb0391336cd658f1521903f15bd9639ca085a01d103fd", 0xac}, {&(0x7f0000000100)="6039ab88f4bebc67f4f144b1a896a460e82839249fffaf00e851d157961ea806ba4575d75273f0fb12f76cf32ab810dd73c9948a90723fbda06821228b11aaf48b0c307a45aab12d6c0bfbd325bd2c55cfe4e8f6408ff6d973e8d896fdd35fdb55aae9de48209f3db1362e658d22f81f9375e7f66b2b3f4388ee8958", 0x7c}, {&(0x7f0000001380)="0cbb0c2f0a5702cbfdb235843f5a15000bf8a914933fa49adfa516b27ef74e20c4fac10a53ff8bd5603485261b4f429b81ea2dd2466b1ce8c740bdc85bf1e4f62eae699fe3f9a04e38a2e13578a9ec6fe0d299e0c8393995b8f2a577a078e2f41bd7d370c59002b1ab1c36f5d03310221a689c727386ee1eef7dc8072d53f9f666390fbc8d5b350a1a712cfbb79e1884ded24826fa89d10e0aa2ba46377a5969bd73daed4e435ed6158836b11fd85669c4d9d364ded6214a893f473ce77dd86be5cd914739b70830d822e0f27c36dee51fc83f012cba98665f253824dec052cb1be1fba930d332d288100679ff202c8c", 0xf0}, {&(0x7f0000001480)="46e80f7ba6cf6f18dc0cc14d54927e2f6531e6f7e4949bb980538df722e31e1eec54d98c2aed4618a2c8840bc691f40217e3267123546b78608e4fe3ddcce62789dfd7e8fe86d560f4376351a1d2c9b3832ef523634ea28aaee168cfe1ed8155810dd6ae2464475c32c47d8bec9a6ea9c250aa93f1f0a25027b2f213bb20120224c5f5f8188098a563ee7acb49c351a8d8daccb7b5fcb5289721517955d934d27fe435f195e5f421140f940fee606e", 0xaf}], 0x7) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:51:09 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1388.186754] lowmemorykiller: Killing 'syz-executor.1' (9889) (tgid 9889), adj 1000, [ 1388.186754] to free 52384kB on behalf of 'kswapd0' (33) because [ 1388.186754] cache 45908kB is below limit 65536kB for oom_score_adj 12 [ 1388.186754] Free memory is -5320kB above reserved [ 1388.253048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62193 sclass=netlink_route_socket pig=10090 comm=syz-executor.2 [ 1388.335076] lowmemorykiller: Killing 'syz-executor.1' (9898) (tgid 9898), adj 1000, [ 1388.335076] to free 52384kB on behalf of 'syz-executor.5' (10063) because [ 1388.335076] cache 50704kB is below limit 65536kB for oom_score_adj 12 [ 1388.335076] Free memory is -12976kB above reserved [ 1388.344899] lowmemorykiller: Killing 'syz-executor.1' (9981) (tgid 9981), adj 1000, [ 1388.344899] to free 52384kB on behalf of 'kswapd0' (33) because [ 1388.344899] cache 50604kB is below limit 65536kB for oom_score_adj 12 [ 1388.344899] Free memory is -13124kB above reserved [ 1388.376156] lowmemorykiller: Killing 'syz-executor.1' (10016) (tgid 10016), adj 1000, [ 1388.376156] to free 52384kB on behalf of 'syz-executor.1' (10065) because [ 1388.376156] cache 50204kB is below limit 65536kB for oom_score_adj 12 [ 1388.376156] Free memory is -5920kB above reserved [ 1388.379060] lowmemorykiller: Killing 'syz-executor.1' (10001) (tgid 10001), adj 1000, [ 1388.379060] to free 52384kB on behalf of 'kswapd0' (33) because [ 1388.379060] cache 50504kB is below limit 65536kB for oom_score_adj 12 14:51:10 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$peeksig(0x4209, r2, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) wait4(r2, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000003639405cb4aed14e0000000000ae475ae64f8f36460234432479aed75d492b", 0x25}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 1388.379060] Free memory is -7572kB above reserved [ 1388.387225] lowmemorykiller: Killing 'syz-executor.0' (4033) (tgid 4033), adj 1000, [ 1388.387225] to free 52360kB on behalf of 'syz-executor.1' (10065) because [ 1388.387225] cache 50204kB is below limit 65536kB for oom_score_adj 12 [ 1388.387225] Free memory is 6280kB above reserved [ 1388.393221] lowmemorykiller: Killing 'syz-executor.1' (4034) (tgid 4034), adj 1000, 14:51:10 executing program 3: socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x26f}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000480), 0x0, &(0x7f0000000540)=[{0x0, 0x110, 0x81, "54c18dfb69af23a6a052e1dc33b1c1569507bcd93269a2f96cdde1fa3c2b384e263114249e337a1cd034a4f85427f4810c19b655fddae51de843bf129a438490ef4e37664e5f2945be4c3ac34bf5054a6fb25bb3691c406c5fc9878700dcb619b61bd50791a239b776234e83918e53c3e1f2bae4211b8dcfb4f921c5df3246ab5ae6841bf47a2fcd42ca0c6b60263fcd3489cbfeec4353e80937b0956858509822510e37cd63eb90cef1bd57a0db67a6b3480ef95eb4"}, {0x0, 0x116, 0xe4, "69a38ab3db60a817b80a87c5b02a753df3bd6d63f123c5a41745f38936d6b31eb4cefecc11a1e78716da65c4012e650b9e4e77ff0460b1df8a3646"}, {0x0, 0x88, 0x40, "6c779c28abeb7a821db9f949971d8fb90a3347603e8a58d8579e6113e4388344b62172bf1fc68ceac35f744a90b173f92ca9a6a0153caed5cecd5bcc9e40a7d9900c77134c9066d5a01c23e4a37c485fa8"}, {0x0, 0x10f, 0x5, "ae778bd9c70022fc3ad74c0d0a493e43846869754087a24a45447662512864e6034fd639f0a6db25a4664a084ec3b8c11ff87deaec025c691185334c85839fd0096821688bcb6e30d4a93db7e3e261dea8fc9a5157d81196686f1dbc4f617c33db35d9f0bf4a731cee6f6fbaa04e7b6530a93fe040ac435b0de63ef0016500d6f9bb3e0461c8af9750d3a392254eaa7bc21c39323b9fd6b2b3e585005b2f9d196fc768d445467d4c5132c7607a0f458b1326590b3d0d19b90b350304123ca6e6df5c0c94bb211b40b8cd44fb89"}]}}], 0x1, 0x0) [ 1388.393221] to free 52360kB on behalf of 'syz-executor.1' (10065) because [ 1388.393221] cache 50204kB is below limit 65536kB for oom_score_adj 12 [ 1388.393221] Free memory is 20444kB above reserved [ 1388.404146] lowmemorykiller: Killing 'syz-executor.1' (4034) (tgid 4034), adj 1000, [ 1388.404146] to free 52360kB on behalf of 'kswapd0' (33) because [ 1388.404146] cache 50204kB is below limit 65536kB for oom_score_adj 12 14:51:10 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) [ 1388.404146] Free memory is 11480kB above reserved [ 1388.432268] lowmemorykiller: Killing 'syz-executor.0' (4082) (tgid 4082), adj 1000, [ 1388.432268] to free 52360kB on behalf of 'kswapd0' (33) because [ 1388.432268] cache 50204kB is below limit 65536kB for oom_score_adj 12 [ 1388.432268] Free memory is 43604kB above reserved [ 1388.683611] lowmemorykiller: Killing 'syz-executor.0' (4115) (tgid 4115), adj 1000, 14:51:10 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x3, 0x80000) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:10 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) pwritev(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x4081808) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20020102000007) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x0, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000100)) tkill(0x0, 0x800000000002e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) io_setup(0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x18) write$cgroup_type(r3, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x0, 0x70, 0x92, 0xd0, 0x80, 0x3, 0x0, 0x202, 0x20414, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, @perf_bp={&(0x7f0000000080), 0x3}, 0x80, 0x8, 0xffffffff, 0x8, 0x1000, 0x4, 0x8}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) [ 1388.683611] to free 52360kB on behalf of 'syz-executor.5' (10063) because [ 1388.683611] cache 50104kB is below limit 65536kB for oom_score_adj 12 [ 1388.683611] Free memory is 58260kB above reserved 14:51:10 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:10 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:51:10 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f00000006c0)="5ce5d5407389a53eb0eb51405599c8dffc36a34e540ed453138a1ca92da9cb93ef5fd09c930613f9534f3e6eba65bcd4b7a25e5833861bf8250d8e1637936d0c0c3e6fc9e60939bca907b7de86a126d43d8a78c2023756c2db08eb4247c2b85acd2721f7e73b5d39c81c45943d2b3058a65c2df27cb5cecdacb7bba4e7c30caa6dcf3a20f8a7771856f4b3e78ada467823ac8cfaa8b52eeb8404496d825db1fb8e354ea8dd88b940743a16cf2e7048fe") pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)="359890662c06785b98d388c4b57603066dc514d1adbbd9502210e3aefaa36d7531e87f1a2707c77535e33a00bbf0ae659414e923dfb19ff6acdc4a0c0af9755a330df80d9d553499cc96dd5f18a868ba53ad66d42b159eb6a7b5ca43b204828d0bac6bab0c9d8242e825aa856f79e45bfa46eed1bf5c", 0x76}, {&(0x7f00000001c0)="df963aeb7c4e59db69f48dd1b60641fdc4515017c5e969ce18a406fe85f35c2373eeab8c7081ab69769ac0486e171933bdc7d3bca2404d7132b985785476cc2b029bf7a8abf697e3cb643315e69d008b372046aae9c0533b69188eeb59f3701f16e2dd693b02d4eb6a59f3e8bda69a2ea854c25051f0eb414926c6980f8f9b19f2b85f8b05f88987ed33b1747f93c2e0488c7adaf10ff635094098dff635ed74360a57121c952be14aaa39b063e81357900e51a14bc0bff7c1143f7491fe37a2c40b74787973aeb2508ee9f180e41923ede91d4179837420dc416222dd27", 0xde}, {&(0x7f00000002c0)="1a42147afb9647429339ae5793ca9168e9bf7f5ced97491394bdaafdf747fe2a757f12474ec0b17ebfef3b2f8eb3bf537c0a711cb3aa116b0db513da8cdb5379447d1ccf4e8809bb2e18b0d49a89c4135440ba334f49a9c3bc2bdba549bc4fa57364a286116a2851c17109de0d16e7f93680f2e5f9deef2733b9540ed84b3e676cff18a91fe6ec13c1d0e2af64cbd7ad399384e941889f", 0x97}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f00000004c0)="d50c883fc559c6030695abfe39e12e6de60eb2c021787114a366c47521632efe2787d0b08847d6b028c7b753e8d1c5653f3a5a96373d19bb21ff2e86f2d6ab685c494aada8d9508694a673572c61632759d44dc744", 0x55}, {&(0x7f0000000540)="7353c631195befc9214dd0caa345e8826b3049da5ba43f544d750339e3ce4090e86f24c24e4821639e87acf73d276dec4d4361b20595c4a3de9aff47e9c5b93023abc9e19408a14dc3a915f136aea2aae36f5f336284931f85", 0x59}, {&(0x7f0000000000)="7927a100875b97c2fa6d9b8733a5bcef8c73edd7221bd1e4c8aa3eb1c2191baa284ed66333d40a6d", 0x28}], 0x7, 0x4f) [ 1388.972702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62193 sclass=netlink_route_socket pig=10146 comm=syz-executor.2 14:51:10 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='/selinux/enforce\x00') ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace(0x4207, r5) ptrace$peeksig(0x4209, r5, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80c0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:51:10 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fddbdf2510000000080005006f680000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0xff, 0x9, 0x3926}, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="5bc000ff0000e1000000000000000000e900"], 0x1) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000000c0)={{0x1, 0x0, @reserved="5564c08eacb023bcde4c7c20c0c99f1cdc27370c9348d8419d77f30a80186f7b"}}) 14:51:10 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:10 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:11 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x2, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:11 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:11 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:11 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) pwritev(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x4081808) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20020102000007) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x0, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000100)) tkill(0x0, 0x800000000002e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) io_setup(0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x18) write$cgroup_type(r3, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x0, 0x70, 0x92, 0xd0, 0x80, 0x3, 0x0, 0x202, 0x20414, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, @perf_bp={&(0x7f0000000080), 0x3}, 0x80, 0x8, 0xffffffff, 0x8, 0x1000, 0x4, 0x8}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) [ 1389.705413] lowmemorykiller: Killing 'syz-executor.3' (10180) (tgid 10180), adj 1000, [ 1389.705413] to free 52424kB on behalf of 'kswapd0' (33) because [ 1389.705413] cache 33736kB is below limit 65536kB for oom_score_adj 12 [ 1389.705413] Free memory is -6728kB above reserved 14:51:11 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='@'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1389.850931] lowmemorykiller: Killing 'syz-executor.0' (10091) (tgid 10091), adj 1000, [ 1389.850931] to free 52384kB on behalf of 'kswapd0' (33) because [ 1389.850931] cache 35956kB is below limit 65536kB for oom_score_adj 12 [ 1389.850931] Free memory is -7200kB above reserved 14:51:11 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:11 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:11 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x30}, 0x10) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:51:11 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$RTC_UIE_ON(r0, 0x7003) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000200)={0x1, 0xded0, 0x0, 0x8, 0x2, [{0x3, 0x80000000, 0x5, 0x0, 0x0, 0x200}, {0x10000, 0x60343626, 0x4, 0x0, 0x0, 0x100}]}) open(&(0x7f0000000000)='./file0\x00', 0x806, 0x1) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="cae5", 0xffa2}], 0x0, 0x0) close(r1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r5, 0x40207012, &(0x7f00000002c0)={0x6, 0x6, 0x7fff, 0x14, 0x5e8a7b94, 0xa8, 0x7}) write$binfmt_misc(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420800a74, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, 0x0, r9, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x8) sendfile(r7, r8, 0x0, 0x29e) [ 1390.025342] lowmemorykiller: Killing 'syz-executor.3' (10219) (tgid 10219), adj 1000, [ 1390.025342] to free 52424kB on behalf of 'kswapd0' (33) because [ 1390.025342] cache 40100kB is below limit 65536kB for oom_score_adj 12 [ 1390.025342] Free memory is -448kB above reserved 14:51:11 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r15 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r16 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r16) r17 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r18 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r18, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r17, 0x4c00, r18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r16, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r20, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r23, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r23, r21, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000000800)=""/222, 0x4b}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x3f4}, {&(0x7f0000001b00)=""/68, 0x30}], 0x6) read(r19, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r17, r18, 0x0, 0x180003) [ 1390.136370] lowmemorykiller: Killing 'syz-executor.1' (10221) (tgid 10191), adj 1000, [ 1390.136370] to free 52384kB on behalf of 'kswapd0' (33) because [ 1390.136370] cache 45988kB is below limit 65536kB for oom_score_adj 12 [ 1390.136370] Free memory is 9164kB above reserved 14:51:11 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) prctl$PR_GET_SECUREBITS(0x1b) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1390.266062] lowmemorykiller: Killing 'syz-executor.1' (10203) (tgid 10203), adj 1000, [ 1390.266062] to free 52384kB on behalf of 'kswapd0' (33) because [ 1390.266062] cache 50020kB is below limit 65536kB for oom_score_adj 12 [ 1390.266062] Free memory is -6756kB above reserved 14:51:12 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) pwritev(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x4081808) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20020102000007) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket(0x0, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) pipe(&(0x7f0000000100)) tkill(0x0, 0x800000000002e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) io_setup(0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x18) write$cgroup_type(r3, &(0x7f0000000340)='threaded\x00', 0xffffffc5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x0, 0x70, 0x92, 0xd0, 0x80, 0x3, 0x0, 0x202, 0x20414, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8, @perf_bp={&(0x7f0000000080), 0x3}, 0x80, 0x8, 0xffffffff, 0x8, 0x1000, 0x4, 0x8}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) 14:51:12 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420800a74, 0x2) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca917e, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420800a74, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1a, &(0x7f00000001c0)=""/241, &(0x7f0000000000)=0x2e6e40627fa3d9f3) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r8, &(0x7f0000000640)=ANY=[@ANYBLOB="80e6612073bfb45cc2b6bb9014396db0cd83bb37b996a17c8fd9ff4401535b51ecfb791f8325424420c494b702afec91eb096c1a51bef4ef7bb192a66586cb2f8339af68d24b1d62ccfc059667e4b11053ae50e050b90657e52e13323140ffed85f9000000000000002989ced229443ad99f43e1cb0d072eb66dc2579ae80c4a84ea0fee690b92291e4679fbbdbea29ebdf064e5a26cf0bceccae61e003b2d76916b5ed51db5"], 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$inet(r14, &(0x7f0000000380)={0x2, 0x0, @initdev}, &(0x7f00000003c0)=0x10) splice(r11, 0x0, r13, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r11, 0x4004556d, 0x8) ioctl$LOOP_SET_STATUS(r11, 0x4c02, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x80000001, 0x4, "672ed3bc70e80bc4c31b26ee84efe888ef73cfee5f8b6fb55ab783234a5155d0e883ce04f5da103a085e871ee7c664705af81723ad99341eb23712c0471d0085", "72d5626a9ecbcec3516c96b802a5a0790874033630c06b7b86660771dbb158da", [0x8, 0x91]}) splice(r9, 0x0, r10, 0x0, 0x1420800a74, 0x0) read(r10, &(0x7f0000000700)=""/123, 0xfffffffffffffec0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r16 = socket$nl_route(0x10, 0x3, 0x0) splice(r15, 0x0, r16, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r15, 0x4004556d, 0x8) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r15, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r17, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000000) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x102000, 0x0) splice(r0, 0x0, r12, 0x0, 0x1, 0x16) 14:51:12 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) 14:51:12 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1390.457071] lowmemorykiller: Killing 'syz-executor.0' (4133) (tgid 4133), adj 1000, [ 1390.457071] to free 52360kB on behalf of 'kswapd0' (33) because [ 1390.457071] cache 50020kB is below limit 65536kB for oom_score_adj 12 [ 1390.457071] Free memory is -6748kB above reserved [ 1390.715067] lowmemorykiller: Killing 'syz-executor.0' (10279) (tgid 10279), adj 1000, [ 1390.715067] to free 52384kB on behalf of 'kswapd0' (33) because [ 1390.715067] cache 40212kB is below limit 65536kB for oom_score_adj 12 [ 1390.715067] Free memory is -6664kB above reserved 14:51:12 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r20, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r20, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fddbdf251000000008000500030000002e0d64c308fc686cf3a8397fb712d583af7f68b87cad8c2388560f5924bb9476e8aadf0e908099885a9b4606bfbfed481e12ac788c02388d70084b121772d2d7c91bedf190ba079f7f897b191f8b1cc88095d984f8a8e5dab046c643691ead930c3af75fc687799129aaa5eef24d45ec090000001c285b8d9c9127c0eb4bae36b5c9058fc6426f5472b6ad7aa67dd4"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) fstat(r20, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r23, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r23, r21, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80), 0x0) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:12 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, 0xffffffffffffffff, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:51:12 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:12 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000000400001801000000000000000000001002000010020000300300003003000030030000300300003003000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000002800686c000000000000000000000000000000000000000000000000000000000160000000000000280052454a4543540000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbff0000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f800000000000000000000000000000000000000000000000000300053455400000000000000000000000000000000000000000000000000000206000202700a8006040000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0002001000000000000000000000000000000000000000000000000280069636d7036000000000000000000000000000000000000000000000000000f096c0000000000300053455400000000000000000000000000000000000000000000000000080200048f00d0b40e5fff000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000e3ffffffffff2700000000000000000000000000000000000000000000000000000000000000feffffff000000007ef3da220aff6a6815018b3ea0cbc73a9899c24742dcf97bab5299fc51af5b1abc1d29c6db49e9f694a97a35c8df3e33bcbae19ce191cd6939bfb10dc3d0d97f27964c421d68cf44ad9b6d4557b7a0fcdd9fea9bd0f9cf78685d779f16b6cec0e61edea661f907d4019f2db53bd0d4f12895a908968e0baa9b1337c97021307f1da5c8c272634acf7d95f6c7cf3911654ad202f01defc60b7852983754f0b4e7384f71"], 0x460) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) vmsplice(r1, &(0x7f0000000440), 0x0, 0xd) close(r0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc0800) ftruncate(r5, 0xfffffffffffffffd) r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xc102) write$P9_RFSYNC(r6, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1390.989172] lowmemorykiller: Killing 'syz-executor.1' (10296) (tgid 10296), adj 1000, [ 1390.989172] to free 52368kB on behalf of 'kswapd0' (33) because [ 1390.989172] cache 33464kB is below limit 65536kB for oom_score_adj 12 [ 1390.989172] Free memory is -6764kB above reserved [ 1391.020404] lowmemorykiller: Killing 'syz-executor.0' (4154) (tgid 4154), adj 1000, [ 1391.020404] to free 52360kB on behalf of 'kswapd0' (33) because 14:51:12 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) [ 1391.020404] cache 33464kB is below limit 65536kB for oom_score_adj 12 [ 1391.020404] Free memory is 7436kB above reserved [ 1391.085956] lowmemorykiller: Killing 'syz-executor.0' (4178) (tgid 4178), adj 1000, [ 1391.085956] to free 52360kB on behalf of 'kswapd0' (33) because [ 1391.085956] cache 33464kB is below limit 65536kB for oom_score_adj 12 [ 1391.085956] Free memory is 19332kB above reserved [ 1391.206348] lowmemorykiller: Killing 'syz-executor.0' (4199) (tgid 4199), adj 1000, [ 1391.206348] to free 52360kB on behalf of 'kswapd0' (33) because [ 1391.206348] cache 33464kB is below limit 65536kB for oom_score_adj 12 [ 1391.206348] Free memory is 16656kB above reserved 14:51:12 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) close(r0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)={'syz1', "56d67932099eed8974e98b78775c8180a31fb2d43eb67899dce0f0f905b39e58314da109f8a31786a3161d1e641e7b2af9d7d9c9bfe7a8b1a642c55e10efddbdd8d035e21bfa73cbf197b0ded159089641e58b0bb7709ac334a6c53b0f6a10aeee8006ee19f5130c6b6b55c10aa71d8258c4203e4d6532e1fd0362e36025f25187da61c551d3e411b817607f85c53ffa8ae10e9e0062e3b492fc021fe50bcf6d2c23e135220d5ebccef5f9a2eb375a59d2db3373302016dd850d8c566f8c6976c429f15432669bcc8e4bfdd2975c97469fc6b4759fc213008c97012eebd6dddfe216af15ad473a5f46"}, 0xed) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x8) sendto$inet(r5, &(0x7f0000000300)="df72abeda8da7c3a60786445ae6c8c36068d35f815c1b56872dbefb8c41e9739cdc9e4de22cde2ae9b4de1fcb3ed624262b8a413155d84a96cfd45e8ac5225314c33269c1dbb1be33f33cb89791bd13bd37789a32f2225bb47652585c2f21e21141b703980f321c53b98696bd02f2fd3a9f05fb282e1e98bdaaf9188568b8efa41ee5587f80891fadacc4cf95bbb04fcbff564c383b9fb13d50f38c3ae271589c59a8cd0f28aca01e452fee4c2d916", 0xaf, 0x1, &(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x3}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet(0x2, 0x1, 0x2) fsetxattr$smack_xattr_label(r8, &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f00000002c0)={'ppp1'}, 0x5, 0x1) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r9 = inotify_init1(0x80000) r10 = socket(0x0, 0x0, 0x0) r11 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f00000001c0)=0x0) r13 = socket(0x10, 0x80002, 0x0) bind$netlink(r13, 0x0, 0x0) write(r13, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r13, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r13, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) sendto(r13, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) r14 = fcntl$getown(r13, 0x9) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0x200002, 0x0) r16 = openat$cgroup_ro(r15, &(0x7f00000006c0)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r16, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) sendmsg$netlink(r11, &(0x7f0000000500)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x2a12208}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000280)={0xa8, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x10, 0x38, @str='{vmnet1)\x00'}, @nested={0x30, 0x1, [@typed={0x10, 0x8f, @str='/dev/loop#\x00'}, @typed={0xc, 0x45, @u64=0x2}, @typed={0x10, 0x8a, @str='/dev/loop#\x00'}]}, @typed={0x8, 0x83, @pid=r12}, @generic="253451597dd43377d9988586a9e76e52c48a6f2ca35093853643c5483feb507e598d97306f5c8f2456b58775fef117b742c555c127266dc304348e09bd19a736293b04519ebca5a90a0e853695"]}, 0xa8}, {&(0x7f0000000380)={0x48, 0x14, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x1, @u32=0x4}, @generic="f0ed7b91f6dc31eb608f9edb94a41385e114085b9d75c18136194798344fa38d287daf7ebb817b917d80beaa0df1"]}, 0x48}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r14, r17, r18}}}], 0x20}, 0x1) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f00000004c0)) fchown(r9, r17, r19) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[@ANYRES64=r7], 0x8) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:51:13 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1391.253688] lowmemorykiller: Killing 'syz-executor.0' (4217) (tgid 4217), adj 1000, [ 1391.253688] to free 52360kB on behalf of 'kswapd0' (33) because [ 1391.253688] cache 33464kB is below limit 65536kB for oom_score_adj 12 [ 1391.253688] Free memory is 26024kB above reserved 14:51:13 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000002000000", @ANYRES32=r8, @ANYBLOB="08000200e000000238489d4aff2c2461bf01a07ca92469a363a3ccfb6bdc43fcb38a5380c97b272039b15228849bd9545eaf370aa01a6c184a"], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0", r8}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x304) r11 = timerfd_create(0x0, 0x0) timerfd_settime(r11, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r11, r10, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x7) dup3(r13, r12, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r15, r14, 0x0) dup3(r15, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r16 = socket$inet(0x2, 0x0, 0x0) syncfs(r16) r17 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r17, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r18 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r18, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r18, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r19 = syz_open_dev$mice(&(0x7f0000000200)='/\x00', 0x0, 0x2c6600) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r20 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r20) r21 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r22 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r22, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r21, 0x4c00, r22) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r20, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r20, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r24, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r27, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r27, r25, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r19, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r23, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r21, r22, 0x0, 0x180003) [ 1391.311867] lowmemorykiller: Killing 'syz-executor.0' (4238) (tgid 4238), adj 1000, [ 1391.311867] to free 52360kB on behalf of 'kswapd0' (33) because [ 1391.311867] cache 33464kB is below limit 65536kB for oom_score_adj 12 [ 1391.311867] Free memory is 39420kB above reserved 14:51:13 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) [ 1391.612884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47901 sclass=netlink_route_socket pig=10419 comm=syz-executor.4 14:51:13 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r7, r6, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r11, r10, 0x0) dup3(r11, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) splice(r12, 0x0, r13, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r12, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r14, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r14, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1bcddab44faac4be61a342a8f7220b4ec762346ec6e6e2c232d0ecfcf6b83ae7806c8c47c4bf7c75b57c78e7aa72671ac4bc4abe213cce8fecd070f006051d2eb2ac44147738f83a9e4ce20661a38a947beb24f5a110230934c0ff1b04ef68ebdb973fc56a1f00a4905a8621731e77f8575e0776a4b954a05a70899e43192e5a5a76556fe1e4baab307bac6e5c6b6268135b3ce1b729d469d4302af483de4cc041b9688e01b3011b00950d64dd981e51fe080dbe7b659f24b9fef18f8c8945481b2afdc324d891c1b0f5b2ca11c759458ae3b8dddb6b86902431079f", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fde3d1e3f569746a26a0b1d218cba0ab539fdec7d8ef69336f00"/46], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r16 = socket$nl_route(0x10, 0x3, 0x0) splice(r15, 0x0, r16, 0x0, 0x1420800a74, 0x0) syncfs(r5) r17 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r17, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r18 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r18, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r19 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r20 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r20) r21 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r22 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r22, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r21, 0x4c00, r22) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r20, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r20, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r24, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r27, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r27, r25, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r19, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r23, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r21, r22, 0x0, 0x180003) 14:51:13 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:13 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace(0x4207, r3) ptrace$peeksig(0x4209, r3, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) ioprio_get$pid(0x0, r3) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:51:13 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r20, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r20, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fddbdf251000000008000500030000002e0d64c308fc686cf3a8397fb712d583af7f68b87cad8c2388560f5924bb9476e8aadf0e908099885a9b4606bfbfed481e12ac788c02388d70084b121772d2d7c91bedf190ba079f7f897b191f8b1cc88095d984f8a8e5dab046c643691ead930c3af75fc687799129aaa5eef24d45ec090000001c285b8d9c9127c0eb4bae36b5c9058fc6426f5472b6ad7aa67dd4"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) fstat(r20, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r23, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r23, r21, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80), 0x0) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1391.854799] lowmemorykiller: Killing 'syz-executor.3' (10384) (tgid 10384), adj 1000, [ 1391.854799] to free 52392kB on behalf of 'kswapd0' (33) because [ 1391.854799] cache 33472kB is below limit 65536kB for oom_score_adj 12 [ 1391.854799] Free memory is -6712kB above reserved 14:51:13 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) sendfile(r16, r17, 0x0, 0x180003) [ 1391.935355] lowmemorykiller: Killing 'syz-executor.5' (10416) (tgid 10416), adj 1000, [ 1391.935355] to free 52456kB on behalf of 'kswapd0' (33) because [ 1391.935355] cache 33472kB is below limit 65536kB for oom_score_adj 12 [ 1391.935355] Free memory is 6672kB above reserved [ 1391.985101] lowmemorykiller: Killing 'syz-executor.1' (10364) (tgid 10364), adj 1000, [ 1391.985101] to free 52368kB on behalf of 'kswapd0' (33) because [ 1391.985101] cache 33472kB is below limit 65536kB for oom_score_adj 12 [ 1391.985101] Free memory is 20676kB above reserved [ 1392.035033] lowmemorykiller: Killing 'syz-executor.0' (4259) (tgid 4259), adj 1000, [ 1392.035033] to free 52360kB on behalf of 'kswapd0' (33) because [ 1392.035033] cache 33472kB is below limit 65536kB for oom_score_adj 12 [ 1392.035033] Free memory is 37136kB above reserved 14:51:13 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="b209afa1c392fbc8"], 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) fchdir(r3) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1392.095030] lowmemorykiller: Killing 'syz-executor.0' (4277) (tgid 4277), adj 1000, [ 1392.095030] to free 52360kB on behalf of 'kswapd0' (33) because [ 1392.095030] cache 33476kB is below limit 65536kB for oom_score_adj 12 [ 1392.095030] Free memory is 51800kB above reserved 14:51:14 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:14 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r7, r6, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r11, r10, 0x0) dup3(r11, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet(0x2, 0x0, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r15 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r16 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r16) r17 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r18 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r18, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r20 = socket$nl_route(0x10, 0x3, 0x0) splice(r19, 0x0, r20, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r19, 0x4004556d, 0x8) ioctl$LOOP_CHANGE_FD(r19, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r16, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r22, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r25, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r25, r23, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r21, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r17, r18, 0x0, 0x180003) 14:51:14 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:14 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x80000000016, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x8, 0x0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:51:14 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1392.718672] lowmemorykiller: Killing 'syz-executor.1' (10470) (tgid 10470), adj 1000, [ 1392.718672] to free 52408kB on behalf of 'kswapd0' (33) because [ 1392.718672] cache 33476kB is below limit 65536kB for oom_score_adj 12 [ 1392.718672] Free memory is -6748kB above reserved 14:51:14 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) sendfile(r16, r17, 0x0, 0x180003) 14:51:14 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1392.820225] lowmemorykiller: Killing 'syz-executor.5' (10479) (tgid 10479), adj 1000, [ 1392.820225] to free 52464kB on behalf of 'kswapd0' (33) because [ 1392.820225] cache 33476kB is below limit 65536kB for oom_score_adj 12 [ 1392.820225] Free memory is 944kB above reserved [ 1392.896220] lowmemorykiller: Killing 'syz-executor.0' (10459) (tgid 10459), adj 1000, [ 1392.896220] to free 52392kB on behalf of 'kswapd0' (33) because [ 1392.896220] cache 33476kB is below limit 65536kB for oom_score_adj 12 [ 1392.896220] Free memory is 14228kB above reserved 14:51:14 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000380)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x34, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x0, 0x2, 0x8000}, @SEG6_ATTR_SECRET={0x0, 0x4, [0x4, 0x1ff, 0x2, 0xffff8001, 0x923]}, @SEG6_ATTR_HMACKEYID={0x0, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xba}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000000) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000040100005070000000000000000000000f9", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000002000000", @ANYRES32=r9, @ANYBLOB="08000200e000000238489d4aff2c2461bf01a07ca92469a363a3ccfb6bdc43fcb38a5380c97b272039b15228849bd9545eaf370aa01a6c184a"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r10, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000400)={0x0, @rand_addr, @broadcast}, &(0x7f0000000440)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=@deltfilter={0xa68, 0x2d, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x10, 0x7ff8}, {0x0, 0x5}, {0x439fc05d2637c28f, 0xb}}, [@filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x9f4, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x800, 0x5, 0x80000000, 0x73e, 0x4f, 0x3, 0x9, 0xfffffffe, 0x0, 0x4, 0x6, 0x3, 0x8001, 0x10000, 0x1, 0x88a8, 0x9, 0x6, 0x8, 0xd455, 0x7, 0x3, 0x3, 0x3, 0xfffffffa, 0x0, 0xe6, 0x1, 0x878, 0x0, 0x10001, 0x3, 0x101, 0xb7, 0x0, 0xfffffc00, 0xffff, 0x6, 0x3, 0x80000001, 0xffffffff, 0x1, 0x2, 0x97a, 0x1, 0x5, 0x4, 0x5, 0x6, 0x3, 0x5, 0xffff, 0x5, 0x8, 0x2, 0x6, 0x0, 0x8000, 0x4, 0x3, 0x0, 0x401, 0x100, 0x3, 0x1, 0x20000, 0x8, 0x4, 0xf8, 0x1, 0x3, 0x0, 0x100, 0x5, 0x5, 0x4, 0x749, 0x9, 0x5, 0x1, 0x9, 0x2f97, 0x0, 0x7ff, 0x5, 0x40, 0x4, 0x2, 0x676c, 0x3, 0x7, 0xfffeffff, 0x0, 0x106c, 0x8, 0x20, 0xffffffff, 0x1, 0x4, 0x9, 0x100, 0x400846d1, 0x7ff, 0x7, 0x4, 0xfff, 0x100, 0x7ff, 0x1, 0x40, 0x508c, 0x80000001, 0x1000, 0x78a, 0xf539, 0xffffffff, 0x3, 0x4, 0x1, 0x5, 0x9, 0x8, 0x10000, 0xc4c8, 0xfffffff7, 0x5, 0x4, 0x7, 0x51, 0x2, 0xdf0, 0x8, 0x1769, 0x8001, 0x5, 0xf1, 0x3, 0x8361, 0x3, 0x6, 0x8, 0xfffffffa, 0x200, 0x8, 0x7, 0x6, 0x8000, 0x20, 0x7, 0x6, 0x7fffffff, 0x8, 0x36, 0xffffff0c, 0x8001, 0x3f, 0xffff, 0xffffffff, 0x6, 0x88, 0x1000, 0x800, 0xfffeffff, 0x1, 0x3, 0x0, 0xffffffc1, 0x3, 0x5, 0x5, 0x6, 0x9, 0xfffffc01, 0x5, 0x2, 0xffff, 0x2, 0x2, 0xfffffff7, 0x3, 0x9, 0x0, 0x4c, 0x8, 0x0, 0xa325, 0x9, 0xa0, 0x65, 0x74, 0x6, 0xfffffff7, 0x2, 0xffffffe1, 0x6, 0x9, 0x6f, 0xfff, 0x7fffffff, 0x23, 0x7, 0xffffff7f, 0x4, 0x2, 0x2, 0x1, 0x7ff, 0x1, 0x7fff, 0x2, 0x5, 0x7, 0x4, 0x8, 0x3, 0x401, 0x3, 0x1ff, 0x7f, 0xffe00000, 0x10001, 0x7, 0x3, 0x7fff, 0x3, 0x10001, 0x7, 0x1, 0x6b4, 0x4034, 0x4, 0x5, 0x5, 0x9, 0x6, 0x7, 0x5, 0x9, 0x854, 0x6, 0x140000, 0x401, 0x6, 0x7f, 0x1, 0x6, 0x0, 0x1acaf906, 0x6, 0x2, 0x99, 0x1000, 0x80000001, 0x3ff, 0x400]}}, @TCA_CGROUP_EMATCHES={0x68, 0x3, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, @TCF_EM_CONTAINER={0x58, 0x9, {0x81, 0x0, 0x1ff, 0x0, "97e22ec064350ff046b6440804328cceb3a71cfd5f3ed801c9283fade0eb428d70fce45fc4308c69cee5be0a4fef302bfb243eb90ef0f53ce44f95f0bf67f3d5b2b1419bb0921b68"}}}]}, @TCA_CGROUP_POLICE={0x10, 0x2, @TCA_POLICE_RATE64={0xc}}, @TCA_CGROUP_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x9cd1, 0x7, 0x10000, 0x8, 0x3ff, 0x2, 0x1ff, 0x6, 0x401, 0xb69, 0x4, 0x80000000, 0x5b6cd464, 0x0, 0x7, 0x9, 0x9, 0x5, 0x9, 0x5, 0x0, 0x7f, 0x6b, 0x5, 0x5, 0xa35, 0x6, 0x3, 0x0, 0x6, 0x5, 0x7ff, 0x6, 0x3e43, 0x100, 0xc6, 0x0, 0x401, 0x9, 0x9, 0x80000001, 0x9, 0x7, 0x3990, 0x3, 0x5, 0xc1ad, 0x9, 0x1ff, 0x88b, 0x101, 0x4, 0xa9, 0x7, 0xe09b, 0xe39, 0x80, 0x3, 0x1f, 0x6, 0xb4, 0x997, 0x6, 0x3, 0x10001, 0x5, 0x9, 0x80000000, 0x6, 0xffffabbd, 0x9, 0xd7, 0x3f857877, 0x80000000, 0x0, 0x9, 0xfffffffb, 0xcb8e, 0x7, 0x5, 0x6, 0x8, 0x8001, 0x4, 0x2, 0x3, 0x101, 0x7ff, 0x8, 0xc, 0x3, 0x7, 0x0, 0x2, 0x0, 0x5, 0x8, 0x4, 0x8, 0x10001, 0x2, 0x5, 0x101, 0x10000, 0x10001, 0x200, 0x8001, 0x2, 0x8, 0x7, 0x6, 0x76, 0x2, 0xfffffffb, 0xe8c, 0x0, 0x101, 0x200, 0x1, 0x7, 0x4, 0x8000, 0x7, 0x0, 0x8, 0x4, 0x7fff, 0x7fffffff, 0x8, 0x8001, 0x42, 0x5, 0x9, 0xfff, 0x30d, 0x2, 0x101, 0x5f14, 0x5315988d, 0x0, 0x7fff, 0x6, 0x4, 0x5e928b0c, 0x5, 0xffffb168, 0x1, 0x8001, 0x2, 0x8000, 0x40000000, 0x30f3, 0x7fffffff, 0x200, 0xdd, 0x80, 0x400, 0x40, 0x10000, 0x4, 0x10000, 0x6, 0x1f, 0x40, 0x49a0, 0xff, 0x2, 0x8, 0x1f, 0x1f, 0x80, 0xffffffff, 0x80, 0x77f, 0x3, 0x7, 0x2, 0x400, 0x8001, 0xffffffff, 0x20, 0x774, 0x0, 0x101, 0xffffffff, 0xc550, 0x0, 0xb3e, 0x5, 0x203, 0x7, 0x7, 0x81, 0x7ff, 0x5, 0x7f, 0xbfc7, 0x6, 0x1, 0x7ff, 0x0, 0x6, 0x3, 0x8001, 0x1, 0x8, 0x1, 0x190052e4, 0x1ff, 0x101, 0x10, 0x3, 0x9, 0x2, 0x2020, 0xfff, 0x22, 0x100, 0x8, 0x800000, 0x3, 0x6, 0x3ff, 0x9, 0x4, 0x8, 0x1, 0x2, 0x3, 0x400, 0x3, 0x5, 0x6, 0x3, 0x1, 0x2, 0x0, 0x0, 0x1, 0x5, 0x2, 0x70, 0x3, 0xfffffbff, 0x5, 0x401, 0x9, 0x3, 0x8a, 0x3, 0x2, 0x16, 0xe148, 0xfff, 0x9a]}}, @TCA_CGROUP_ACT={0x8c, 0x1, @m_mirred={0x88, 0x7, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0x5, 0x7, 0x8}, 0x1, r11}}}, {0x50, 0x6, "13df4bff97b6804b652c41db74434648401bc4c32c98429dac421e652f9b2da3268efbd8a7882fef206efb9a33371590e7504cc7aca9aed3542cb5a68bb4663c3988d110186c618b858684"}}}}, @TCA_CGROUP_POLICE={0x10, 0x2, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}}, @TCA_CGROUP_ACT={0xcc, 0x1, @m_vlan={0xc8, 0x19, {{0xc, 0x1, 'vlan\x00'}, {0x1c, 0x2, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x8, 0x6, 0x4}]}, {0x98, 0x6, "bf917601a58065f00b07bde5903b52db985bcf50cfa9f8f9c3019b7583181b66f00320cc3f515fa00056d1995c9150eef25f40bd1e09cabd1f817c90ed00259daa479a7f17fb063c511ccf5c9591ef955495a9e43fac08e42ecf4b05e55d1643687c8c37feb8a70d9ee51d8c58ccb0881603e0ed83cd98b47d6141f4a62152342ac3544cba9069a3090e5b13889da96b867c4d45"}}}}]}}, @filter_kind_options=@f_flower={{0xc, 0x1, 'flower\x00'}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IP_TTL_MASK={0x8, 0x4c, 0x9}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x8}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x8, 0x19, 0x88a8}]}}, @TCA_RATE={0x8, 0x5, {0x23, 0xe4}}, @TCA_RATE={0x8, 0x5, {0x80}}, @TCA_CHAIN={0x8, 0xb, 0x57659a21}]}, 0xa68}, 0x1, 0x0, 0x0, 0x8809}, 0x14801) write$UHID_DESTROY(r3, &(0x7f0000000000), 0x4) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r12, &(0x7f0000000200)=ANY=[@ANYBLOB="00b0748f1368141d787439ca601dafcaf6d3824b2a5db8f16812cfe7bfb70c6bc534476125db18afc26ad1f6760ebc41d032d04debe57727301bc1c680880789151780fd8bb7e306f78414da32594ed752e023fd96a107fbcf40ec16e9b8df9d6494919371a80219427b15a7ed6d99d265a9f2b5d82f3c0544"], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) r13 = inotify_init1(0x0) fcntl$setown(r13, 0x8, 0xffffffffffffffff) fcntl$getownex(r13, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r14, 0x0, 0x0) ptrace(0x4207, r14) ptrace$peeksig(0x4209, r14, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) r15 = getpgrp(r14) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r15, 0x10, &(0x7f0000000540)={0x6}) [ 1393.018673] lowmemorykiller: Killing 'syz-executor.0' (4303) (tgid 4303), adj 1000, [ 1393.018673] to free 52360kB on behalf of 'kswapd0' (33) because [ 1393.018673] cache 33476kB is below limit 65536kB for oom_score_adj 12 [ 1393.018673] Free memory is 26740kB above reserved [ 1393.057882] lowmemorykiller: Killing 'syz-executor.0' (4359) (tgid 4359), adj 1000, [ 1393.057882] to free 52360kB on behalf of 'kswapd0' (33) because [ 1393.057882] cache 33480kB is below limit 65536kB for oom_score_adj 12 [ 1393.057882] Free memory is 34592kB above reserved [ 1393.100255] lowmemorykiller: Killing 'syz-executor.0' (4380) (tgid 4380), adj 1000, [ 1393.100255] to free 52360kB on behalf of 'kswapd0' (33) because [ 1393.100255] cache 33480kB is below limit 65536kB for oom_score_adj 12 [ 1393.100255] Free memory is 44848kB above reserved 14:51:14 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:15 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x21200417fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', '(lomime_typeselinuxbdev.posix_acl_accesseth0.@ppp1\\\x00'}, &(0x7f0000000080)='/selinux/enforce\x00', 0x11, 0x1) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:51:15 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r7, r6, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r11, r10, 0x0) dup3(r11, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) splice(r12, 0x0, r13, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r12, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r14, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r14, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1bcddab44faac4be61a342a8f7220b4ec762346ec6e6e2c232d0ecfcf6b83ae7806c8c47c4bf7c75b57c78e7aa72671ac4bc4abe213cce8fecd070f006051d2eb2ac44147738f83a9e4ce20661a38a947beb24f5a110230934c0ff1b04ef68ebdb973fc56a1f00a4905a8621731e77f8575e0776a4b954a05a70899e43192e5a5a76556fe1e4baab307bac6e5c6b6268135b3ce1b729d469d4302af483de4cc041b9688e01b3011b00950d64dd981e51fe080dbe7b659f24b9fef18f8c8945481b2afdc324d891c1b0f5b2ca11c759458ae3b8dddb6b86902431079f", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fde3d1e3f569746a26a0b1d218cba0ab539fdec7d8ef69336f00"/46], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r16 = socket$nl_route(0x10, 0x3, 0x0) splice(r15, 0x0, r16, 0x0, 0x1420800a74, 0x0) syncfs(r5) r17 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r17, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r18 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r18, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r19 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r20 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r20) r21 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r22 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r22, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r21, 0x4c00, r22) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r20, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r20, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r24, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r27, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r27, r25, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r19, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r23, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r21, r22, 0x0, 0x180003) 14:51:15 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@rand_addr="34ead9c6e056ac7ade25e337f2af7c6e"}, 0x14) socket(0xa, 0x2, 0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="721c000000", @ANYRES16=0x0, @ANYBLOB="46922fbd7000ba307114100000000800050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="46922f3f000000000000000000000820059bb11b17399ecbbcae4f1d0d88742b8f46fc3899e5f5b8d4d59d2546d3feaa10fa1d86cf0295941900000000cfb5c597d6a063d044fa24fc228efeee29bf53e67a96e499c4a07864920200"/108], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0", r6}, 0x5e) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r9, r8, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x7) dup3(r11, r10, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r13, r12, 0x0) dup3(r13, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:51:15 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:51:15 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) sendfile(r16, r17, 0x0, 0x180003) 14:51:15 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:51:15 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x2, 0x0, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 1393.839712] lowmemorykiller: Killing 'syz-executor.5' (10551) (tgid 10551), adj 1000, [ 1393.839712] to free 52464kB on behalf of 'kswapd0' (33) because [ 1393.839712] cache 33488kB is below limit 65536kB for oom_score_adj 12 [ 1393.839712] Free memory is -6888kB above reserved [ 1393.916007] lowmemorykiller: Killing 'syz-executor.0' (10560) (tgid 10560), adj 1000, [ 1393.916007] to free 52392kB on behalf of 'kswapd0' (33) because [ 1393.916007] cache 33488kB is below limit 65536kB for oom_score_adj 12 [ 1393.916007] Free memory is -4272kB above reserved [ 1393.958205] lowmemorykiller: Killing 'syz-executor.0' (4394) (tgid 4394), adj 1000, [ 1393.958205] to free 52360kB on behalf of 'kswapd0' (33) because [ 1393.958205] cache 33488kB is below limit 65536kB for oom_score_adj 12 [ 1393.958205] Free memory is 11188kB above reserved [ 1394.006652] lowmemorykiller: Killing 'syz-executor.0' (4413) (tgid 4413), adj 1000, [ 1394.006652] to free 52360kB on behalf of 'kswapd0' (33) because [ 1394.006652] cache 33488kB is below limit 65536kB for oom_score_adj 12 [ 1394.006652] Free memory is 25236kB above reserved 14:51:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420800a74, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20080) io_setup(0x20000000002, &(0x7f0000000240)=0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x863c345b536dd9b5, 0x381) io_submit(r3, 0x2, &(0x7f0000000100)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_destroy(r3) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r4, 0x0, r5, 0x0, 0x200, 0x0) [ 1394.070389] lowmemorykiller: Killing 'syz-executor.1' (4478) (tgid 4478), adj 1000, [ 1394.070389] to free 52360kB on behalf of 'kswapd0' (33) because [ 1394.070389] cache 33492kB is below limit 65536kB for oom_score_adj 12 [ 1394.070389] Free memory is 52912kB above reserved 14:51:15 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r7, r6, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r11, r10, 0x0) dup3(r11, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) splice(r12, 0x0, r13, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r12, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r14, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r14, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1bcddab44faac4be61a342a8f7220b4ec762346ec6e6e2c232d0ecfcf6b83ae7806c8c47c4bf7c75b57c78e7aa72671ac4bc4abe213cce8fecd070f006051d2eb2ac44147738f83a9e4ce20661a38a947beb24f5a110230934c0ff1b04ef68ebdb973fc56a1f00a4905a8621731e77f8575e0776a4b954a05a70899e43192e5a5a76556fe1e4baab307bac6e5c6b6268135b3ce1b729d469d4302af483de4cc041b9688e01b3011b00950d64dd981e51fe080dbe7b659f24b9fef18f8c8945481b2afdc324d891c1b0f5b2ca11c759458ae3b8dddb6b86902431079f", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fde3d1e3f569746a26a0b1d218cba0ab539fdec7d8ef69336f00"/46], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r16 = socket$nl_route(0x10, 0x3, 0x0) splice(r15, 0x0, r16, 0x0, 0x1420800a74, 0x0) syncfs(r5) r17 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r17, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r18 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r18, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r19 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r20 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r20) r21 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r22 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r22, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r21, 0x4c00, r22) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r20, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r20, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r24, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r27, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r27, r25, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r19, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r23, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r21, r22, 0x0, 0x180003) 14:51:15 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fddbdf251000000008000500030000004955a6190916278f899f7cb5cd9bb09abb0cca302a1d036472783ff319d46377311a88d95e7c5a"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r9, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000100", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fddbdf25100000000800050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r10, r7, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r12, r11, 0x0) r13 = dup3(r12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r14 = socket$inet(0x2, 0x0, 0x0) syncfs(r14) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r15, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r16 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r16, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r16, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r17 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r18 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r18) r19 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r20 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r20, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r19, 0x4c00, r20) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r18, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r18, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r22, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r24, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r24, r23, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r17, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r21, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r19, r20, 0x0, 0x180003) 14:51:16 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x2, 0x0, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:51:16 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 1394.774395] lowmemorykiller: Killing 'syz-executor.5' (10623) (tgid 10623), adj 1000, [ 1394.774395] to free 52444kB on behalf of 'kswapd0' (33) because [ 1394.774395] cache 33500kB is below limit 65536kB for oom_score_adj 12 [ 1394.774395] Free memory is -6696kB above reserved [ 1394.815317] lowmemorykiller: Killing 'syz-executor.0' (4480) (tgid 4480), adj 1000, [ 1394.815317] to free 52360kB on behalf of 'kswapd0' (33) because [ 1394.815317] cache 33500kB is below limit 65536kB for oom_score_adj 12 [ 1394.815317] Free memory is 9852kB above reserved [ 1394.848322] lowmemorykiller: Killing 'syz-executor.3' (10706) (tgid 10706), adj 1000, [ 1394.848322] to free 52364kB on behalf of 'kswapd0' (33) because [ 1394.848322] cache 33500kB is below limit 65536kB for oom_score_adj 12 [ 1394.848322] Free memory is 20920kB above reserved [ 1394.885111] lowmemorykiller: Killing 'syz-executor.0' (4529) (tgid 4529), adj 1000, [ 1394.885111] to free 52360kB on behalf of 'kswapd0' (33) because [ 1394.885111] cache 33504kB is below limit 65536kB for oom_score_adj 12 [ 1394.885111] Free memory is 37664kB above reserved [ 1394.914756] lowmemorykiller: Killing 'syz-executor.1' (4535) (tgid 4535), adj 1000, [ 1394.914756] to free 52360kB on behalf of 'kswapd0' (33) because [ 1394.914756] cache 33504kB is below limit 65536kB for oom_score_adj 12 [ 1394.914756] Free memory is 53752kB above reserved 14:52:15 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000000)={0xfffffffd, 0x6, 0xa878, 0x7fffffff, 0xf8b, 0x20}) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:15 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:52:15 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x2, 0x0, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:52:15 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) socket$inet6(0xa, 0xa, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:15 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r7, r6, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r11, r10, 0x0) dup3(r11, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r13 = socket$nl_route(0x10, 0x3, 0x0) splice(r12, 0x0, r13, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r12, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r14, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r14, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1bcddab44faac4be61a342a8f7220b4ec762346ec6e6e2c232d0ecfcf6b83ae7806c8c47c4bf7c75b57c78e7aa72671ac4bc4abe213cce8fecd070f006051d2eb2ac44147738f83a9e4ce20661a38a947beb24f5a110230934c0ff1b04ef68ebdb973fc56a1f00a4905a8621731e77f8575e0776a4b954a05a70899e43192e5a5a76556fe1e4baab307bac6e5c6b6268135b3ce1b729d469d4302af483de4cc041b9688e01b3011b00950d64dd981e51fe080dbe7b659f24b9fef18f8c8945481b2afdc324d891c1b0f5b2ca11c759458ae3b8dddb6b86902431079f", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fde3d1e3f569746a26a0b1d218cba0ab539fdec7d8ef69336f00"/46], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r16 = socket$nl_route(0x10, 0x3, 0x0) splice(r15, 0x0, r16, 0x0, 0x1420800a74, 0x0) syncfs(r5) r17 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r17, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r18 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r18, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r19 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r20 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r20) r21 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r22 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r22, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r21, 0x4c00, r22) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r20, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r20, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r24, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r27, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r27, r25, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r19, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r23, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r21, r22, 0x0, 0x180003) 14:52:15 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x4, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r9 = accept(r8, &(0x7f0000000800)=@in={0x2, 0x0, @local}, &(0x7f0000000180)=0x80) dup3(r9, r7, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r11, r10, 0x0) dup3(r11, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet(0x2, 0x0, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r15 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r16 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r16) r17 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r18 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r18, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r17, 0x4c00, r18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r16, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r20, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r23, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x2, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x0, r23, r21, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x1, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3, 0x0, 0x200000000000000}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r19, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r17, r18, 0x0, 0x180003) 14:52:15 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7) fsync(0xffffffffffffffff) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:52:15 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:52:15 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0xffffff7f00000000, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x78}}, 0x0) 14:52:16 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thrYad-self/attr/currenl\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='ord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000180)='/dev\x1d\x14\x00\x00\x00\x00\x00\x00\x00\x00', 0x5) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5ba5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x40, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:16 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:20 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x31000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000140)={'batadv0\x00', 0xeab0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f0000000080), &(0x7f0000000100)={0x15f3}, 0x8) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r6, 0x0, 0x0) ptrace(0x4207, r6) ptrace$peeksig(0x4209, r6, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) ptrace$cont(0x7, r6, 0x1, 0x100) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) 14:52:20 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$PPPIOCDISCONN(r2, 0x7439) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x006', @ANYRES16=0x0, @ANYBLOB="46922fbd7000fddbdf25100000000800050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$packet_int(r3, 0x107, 0x3, &(0x7f00000000c0)=0x7, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x1420800a74, 0x0) write$binfmt_misc(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES64, @ANYRESOCT, @ANYRES16=r0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES64], @ANYRES32], @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR, @ANYRES64=0x0, @ANYPTR, @ANYRESHEX, @ANYRESOCT=r6], @ANYRES32=0x0, @ANYPTR64], 0x65) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:cgroup_t:s0\x00', 0x1e, 0x0) 14:52:20 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:20 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:20 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x400400, 0x0) preadv(r11, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet(0x2, 0x0, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r15 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r16 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r16) r17 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r18 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r18, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r17, 0x4c00, r18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r16, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r20, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r23, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r23, r21, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r19, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r17, r18, 0x0, 0x180003) 14:52:20 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f842473a457206fcb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec1000000000000000035716ed0be9fb90437e907d4ee63c572a67fb888108744339e535a893509d12bb3d06a2e00"/189], 0x5) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 14:52:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/stat\x00') ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)) 14:52:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 14:52:20 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:20 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) splice(r10, 0x0, r11, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r10, 0x4004556d, 0x8) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\x00\x00\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r12, r9, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r13 = socket$inet(0x2, 0x0, 0x0) syncfs(r13) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r15, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r15, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r16 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r17 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r17) r18 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r19 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r19, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r18, 0x4c00, r19) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r17, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r17, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r21, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r24, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r24, r22, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r16, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r20, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r18, r19, 0x0, 0x180003) 14:52:20 executing program 5: rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmsg(r2, &(0x7f0000000240)={0x0, 0x11e, 0x0, 0x0, 0x0, 0xfffffd17}, 0x0) dup2(r1, r2) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000003c0)=r0) r5 = gettid() tkill(r5, 0x16) write(0xffffffffffffffff, 0x0, 0x0) [ 1459.146316] lowmemorykiller: Killing 'syz-executor.5' (10694) (tgid 10694), adj 1000, [ 1459.146316] to free 52448kB on behalf of 'kswapd0' (33) because [ 1459.146316] cache 33588kB is below limit 65536kB for oom_score_adj 12 [ 1459.146316] Free memory is -6664kB above reserved [ 1459.231339] lowmemorykiller: Killing 'syz-executor.5' (10767) (tgid 10767), adj 1000, [ 1459.231339] to free 52448kB on behalf of 'kswapd0' (33) because [ 1459.231339] cache 33588kB is below limit 65536kB for oom_score_adj 12 [ 1459.231339] Free memory is 5316kB above reserved [ 1459.265657] lowmemorykiller: Killing 'syz-executor.1' (10812) (tgid 10812), adj 1000, [ 1459.265657] to free 52384kB on behalf of 'kswapd0' (33) because [ 1459.265657] cache 33588kB is below limit 65536kB for oom_score_adj 12 [ 1459.265657] Free memory is 15864kB above reserved [ 1459.305067] lowmemorykiller: Killing 'syz-executor.1' (10826) (tgid 10826), adj 1000, [ 1459.305067] to free 52384kB on behalf of 'kswapd0' (33) because [ 1459.305067] cache 33588kB is below limit 65536kB for oom_score_adj 12 [ 1459.305067] Free memory is 22052kB above reserved [ 1459.334826] lowmemorykiller: Killing 'syz-executor.1' (10689) (tgid 10689), adj 1000, [ 1459.334826] to free 52376kB on behalf of 'kswapd0' (33) because [ 1459.334826] cache 33588kB is below limit 65536kB for oom_score_adj 12 [ 1459.334826] Free memory is 39136kB above reserved 14:52:21 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x4) 14:52:21 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:21 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:21 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:21 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="000d21011703b55c089a84704a92eb71514d7f6f34216cfc596304fbe6038fc696990b1d6d5cbbbb4c5289f1e0808fe72acc585cb3aa59e7"], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:21 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000080)) [ 1459.869827] lowmemorykiller: Killing 'syz-executor.3' (10748) (tgid 10748), adj 1000, [ 1459.869827] to free 52364kB on behalf of 'kswapd0' (33) because [ 1459.869827] cache 33596kB is below limit 65536kB for oom_score_adj 12 [ 1459.869827] Free memory is -6856kB above reserved 14:52:21 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:21 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:21 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 1460.033789] lowmemorykiller: Killing 'syz-executor.3' (10784) (tgid 10784), adj 1000, [ 1460.033789] to free 52364kB on behalf of 'kswapd0' (33) because [ 1460.033789] cache 33596kB is below limit 65536kB for oom_score_adj 12 [ 1460.033789] Free memory is -8904kB above reserved [ 1460.129652] lowmemorykiller: Killing 'syz-executor.5' (10990) (tgid 10990), adj 1000, [ 1460.129652] to free 52420kB on behalf of 'kswapd0' (33) because [ 1460.129652] cache 33596kB is below limit 65536kB for oom_score_adj 12 [ 1460.129652] Free memory is 5456kB above reserved 14:52:21 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4cafcd478c2d0b3333aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1460.178654] lowmemorykiller: Killing 'syz-executor.1' (10949) (tgid 10922), adj 1000, [ 1460.178654] to free 52396kB on behalf of 'kswapd0' (33) because [ 1460.178654] cache 33596kB is below limit 65536kB for oom_score_adj 12 [ 1460.178654] Free memory is 14420kB above reserved 14:52:22 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) accept4$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14, 0x800) bind$packet(r1, &(0x7f0000000100)={0x11, 0x11, r5, 0x1, 0x4}, 0x14) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:22 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, 0xffffffffffffffff, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1460.411767] lowmemorykiller: Killing 'syz-executor.1' (10945) (tgid 10945), adj 1000, [ 1460.411767] to free 52396kB on behalf of 'kswapd0' (33) because [ 1460.411767] cache 33600kB is below limit 65536kB for oom_score_adj 12 [ 1460.411767] Free memory is -6740kB above reserved 14:52:22 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="d3a6390b34ef8403197d7735b66c091f461531ab38c3d8c281f56efe8e9bb8e4d87847d72ce6eb09e318345085a1df8340b22c8cd70a91bfc21d7eed6a701411a57f906328a031ce39a5060be8ccb02e3e9d90e598d4"], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendto$unix(r3, &(0x7f0000000000)="d49af5b596679714fda40f7e137aa91b1f1af0ebdc85e9b26da994a46281650b0f0c8afdd529b712f9a7773d79c5dc010b5f445187467d8e72b433334500922a", 0x40, 0x20000000, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) [ 1460.539112] lowmemorykiller: Killing 'syz-executor.3' (10885) (tgid 10885), adj 1000, [ 1460.539112] to free 52364kB on behalf of 'kswapd0' (33) because [ 1460.539112] cache 33600kB is below limit 65536kB for oom_score_adj 12 [ 1460.539112] Free memory is -4132kB above reserved [ 1460.627830] lowmemorykiller: Killing 'syz-executor.1' (4551) (tgid 4551), adj 1000, [ 1460.627830] to free 52360kB on behalf of 'kswapd0' (33) because [ 1460.627830] cache 33600kB is below limit 65536kB for oom_score_adj 12 [ 1460.627830] Free memory is 60kB above reserved [ 1460.670734] lowmemorykiller: Killing 'syz-executor.0' (4560) (tgid 4560), adj 1000, [ 1460.670734] to free 52360kB on behalf of 'kswapd0' (33) because [ 1460.670734] cache 33600kB is below limit 65536kB for oom_score_adj 12 [ 1460.670734] Free memory is 7660kB above reserved 14:52:22 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:22 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(0xffffffffffffffff, r9, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet(0x2, 0x0, 0x0) syncfs(r10) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:52:22 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1460.784842] lowmemorykiller: Killing 'syz-executor.1' (11048) (tgid 11034), adj 1000, [ 1460.784842] to free 52384kB on behalf of 'kswapd0' (33) because [ 1460.784842] cache 33600kB is below limit 65536kB for oom_score_adj 12 [ 1460.784842] Free memory is 20436kB above reserved 14:52:22 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, 0xffffffffffffffff, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1461.063736] lowmemorykiller: Killing 'syz-executor.5' (11040) (tgid 11040), adj 1000, [ 1461.063736] to free 52420kB on behalf of 'kswapd0' (33) because [ 1461.063736] cache 33608kB is below limit 65536kB for oom_score_adj 12 [ 1461.063736] Free memory is -6700kB above reserved [ 1461.185710] lowmemorykiller: Killing 'syz-executor.0' (11067) (tgid 11067), adj 1000, [ 1461.185710] to free 52392kB on behalf of 'kswapd0' (33) because [ 1461.185710] cache 33608kB is below limit 65536kB for oom_score_adj 12 [ 1461.185710] Free memory is -4092kB above reserved 14:52:23 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000640)={{0x107, 0x20, 0x9, 0x380, 0x1a9, 0x2, 0x77, 0x5}, "876be06fea46a6bc5d6f4335f605b25fc5271a72ade47e1c4dd7e91d50e513c017cecf2db11f83a3ad9b7c19936a9f137769ebb383e43f6bc13004f6701d3e17620cc5afb847f31998d36156b3f4dd1158b7e884edd395af242d3324d50813e8be50e781ab91b92a494416072279b939ea5b8487748fb1b0952049a40037809aabb18cb089ae8a3b4c09220578a5602ae85f43f6c05ebaa0c8bdaaba", [[], [], [], [], [], []]}, 0x6bc) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:23 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:23 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0xffffffffffffff4a) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x7, 0x4) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) [ 1461.336430] lowmemorykiller: Killing 'syz-executor.1' (11043) (tgid 11043), adj 1000, [ 1461.336430] to free 52384kB on behalf of 'kswapd0' (33) because [ 1461.336430] cache 33608kB is below limit 65536kB for oom_score_adj 12 [ 1461.336430] Free memory is -7628kB above reserved 14:52:23 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x274, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x12c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x745}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62c3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe5a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x49}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8292}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r4, 0x0, r5, 0x0, 0x1420800a74, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000500), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r6, 0x0, 0x1420800a74, 0x0) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000440)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x0) 14:52:23 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, 0xffffffffffffffff, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1461.538105] lowmemorykiller: Killing 'syz-executor.5' (11101) (tgid 11101), adj 1000, [ 1461.538105] to free 52420kB on behalf of 'kswapd0' (33) because [ 1461.538105] cache 33608kB is below limit 65536kB for oom_score_adj 12 [ 1461.538105] Free memory is -6980kB above reserved [ 1461.617548] lowmemorykiller: Killing 'syz-executor.3' (11093) (tgid 11093), adj 1000, [ 1461.617548] to free 52364kB on behalf of 'kswapd0' (33) because [ 1461.617548] cache 33608kB is below limit 65536kB for oom_score_adj 12 [ 1461.617548] Free memory is -1820kB above reserved [ 1461.653346] lowmemorykiller: Killing 'syz-executor.1' (11114) (tgid 11084), adj 1000, [ 1461.653346] to free 52384kB on behalf of 'kswapd0' (33) because 14:52:23 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:52:23 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, 0xffffffffffffffff, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1461.653346] cache 33608kB is below limit 65536kB for oom_score_adj 12 [ 1461.653346] Free memory is 13108kB above reserved 14:52:23 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r11, r10, 0x0) dup3(r11, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet(0x2, 0x0, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r15 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r16 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r16) r17 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r18 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r18, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r17, 0x4c00, r18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r16, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2, 0x0}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r24, &(0x7f0000000000)=ANY=[], 0xfffffd88) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r26 = socket$nl_route(0x10, 0x3, 0x0) splice(r25, 0x0, r26, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r25, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r28 = socket$nl_route(0x10, 0x3, 0x0) splice(r27, 0x0, r28, 0x0, 0x1420800a74, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r29, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r29, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x11, 0x7fff, 0x9, 0xc82, 0x20, r29, 0x8000, [], r23, 0xffffffffffffffff, 0x3, 0x4}, 0x3c) read(r7, &(0x7f0000000700)=""/242, 0xfffffd2e) sendfile(r17, r18, 0x0, 0x180003) 14:52:23 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, 0xffffffffffffffff, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1461.902352] lowmemorykiller: Killing 'syz-executor.1' (11106) (tgid 11106), adj 1000, [ 1461.902352] to free 52384kB on behalf of 'kswapd0' (33) because [ 1461.902352] cache 33616kB is below limit 65536kB for oom_score_adj 12 [ 1461.902352] Free memory is -6644kB above reserved [ 1461.957301] lowmemorykiller: Killing 'syz-executor.0' (11115) (tgid 11115), adj 1000, [ 1461.957301] to free 52380kB on behalf of 'kswapd0' (33) because [ 1461.957301] cache 33616kB is below limit 65536kB for oom_score_adj 12 [ 1461.957301] Free memory is -1652kB above reserved [ 1462.057364] lowmemorykiller: Killing 'syz-executor.1' (4628) (tgid 4628), adj 1000, [ 1462.057364] to free 52360kB on behalf of 'kswapd0' (33) because [ 1462.057364] cache 33616kB is below limit 65536kB for oom_score_adj 12 [ 1462.057364] Free memory is 17492kB above reserved 14:52:23 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1462.114381] lowmemorykiller: Killing 'syz-executor.1' (4655) (tgid 4655), adj 1000, [ 1462.114381] to free 52360kB on behalf of 'kswapd0' (33) because [ 1462.114381] cache 33616kB is below limit 65536kB for oom_score_adj 12 [ 1462.114381] Free memory is 32056kB above reserved [ 1462.165148] lowmemorykiller: Killing 'syz-executor.3' (11151) (tgid 11151), adj 1000, [ 1462.165148] to free 52384kB on behalf of 'kswapd0' (33) because [ 1462.165148] cache 33616kB is below limit 65536kB for oom_score_adj 12 [ 1462.165148] Free memory is 42808kB above reserved 14:52:24 executing program 2: setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="50cc7e357426cafb4b54f0b9a25cc1e478e4a89021ccca1830f3c940cab6cf968d8a61f658756dd48ca8a7c6313f3b8fe334bf7a45bcd790160bb3f683854e53964c6d6046f99b73eb0e6dfa7e918f8d053bfbb42bb8a81020f0b5b09ad7bab1acb33a2b632e324211b2d0599646909a7d79e23f8217da4b66dcbfdd23dc0a9876c02cfbcd16b451d3db0e753575bff0c25b90675e5e4d13d2a8e0fde9e9dd828d1231286a3d6cc4b339ee64a0bc081db37d18484317281698acd02f02e8a44ef863c412f6511987d406"], 0xcc) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) clock_gettime(0x3, &(0x7f0000000000)) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x6, 0x0) fcntl$setflags(r1, 0x2, 0x9cdf6e3a74263f4b) socket$inet6(0xa, 0x2, 0x51) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:24 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="f7fc0b5d80ded3fcd5aa8cf7", 0xc}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20020008}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="37de4fb4531dd060c4818f23a541ab684109c0089e5c8e323006679b51d003730f59ff9f7a34af2f79010dd9a964b030167bf87968575e4ff7a42ed7c09bd5518bf5c77a8aa98f7998a22e7bd7035c4370bbd3a16318cef24464d0807d67a7e46c0295d2df943aed82e8f45cd8396ccd5e91cbd97975857f3ae2afac92104df80f5e80f4f63b64c7655f916ad30a70975eba61ce42ba8ac617fd8ee62b9192e44dc95efe577a5cd4e60fd5a5ec20006f00"/192, @ANYRES16=r5, @ANYBLOB="000325bd7000ffdbdf25070000000c0005000800010069620001180007000c00040010000000000000000800010000800000"], 0x38}, 0x1, 0x0, 0x0, 0x8100}, 0xbf1ba2e281eb8e4e) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1004002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="36eb045e774b9ec1b4", @ANYRES16=r5, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x1801}, 0x4000) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r7, 0x0, 0x1420800a74, 0x0) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r9, 0x0, 0x0) ptrace(0x4207, r9) ptrace$peeksig(0x4209, r9, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000040)={0x4, r9}) close(r0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='_Y\x85C\x0f\x16\x97}\x14\x00', 0x200000, 0x0) write$binfmt_misc(r10, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r12 = socket$nl_route(0x10, 0x3, 0x0) splice(r11, 0x0, r12, 0x0, 0x1420800a74, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8008948}, 0x4000800) ioctl$UI_SET_SWBIT(r11, 0x4004556d, 0x8) exit_group(0x6) splice(r11, 0x0, r1, 0x0, 0x8000000200, 0xc) 14:52:24 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, 0xffffffffffffffff, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:24 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000000)={0x7, 0x9}) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:24 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:24 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:24 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) dup3(0xffffffffffffffff, r8, 0x180000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r23, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r23, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="46922fbd706c0ae9da25100000000800050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet_mreqn(r23, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1462.754912] lowmemorykiller: Killing 'syz-executor.5' (11201) (tgid 11201), adj 1000, [ 1462.754912] to free 52464kB on behalf of 'kswapd0' (33) because [ 1462.754912] cache 33620kB is below limit 65536kB for oom_score_adj 12 [ 1462.754912] Free memory is -6692kB above reserved 14:52:24 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f0000000000)="f7", 0x2}], 0x10000000000004c9, 0x8) close(r0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:24 executing program 5: setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="50cc7e357426cafb4b54f0b9a25cc1e478e4a89021ccca1830f3c940cab6cf968d8a61f658756dd48ca8a7c6313f3b8fe334bf7a45bcd790160bb3f683854e53964c6d6046f99b73eb0e6dfa7e918f8d053bfbb42bb8a81020f0b5b09ad7bab1acb33a2b632e324211b2d0599646909a7d79e23f8217da4b66dcbfdd23dc0a9876c02cfbcd16b451d3db0e753575bff0c25b90675e5e4d13d2a8e0fde9e9dd828d1231286a3d6cc4b339ee64a0bc081db37d18484317281698acd02f02e8a44ef863c412f6511987d406"], 0xcc) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) clock_gettime(0x3, &(0x7f0000000000)) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x6, 0x0) fcntl$setflags(r1, 0x2, 0x9cdf6e3a74263f4b) socket$inet6(0xa, 0x2, 0x51) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) [ 1462.898869] lowmemorykiller: Killing 'syz-executor.5' (11254) (tgid 11254), adj 1000, [ 1462.898869] to free 52420kB on behalf of 'kswapd0' (33) because [ 1462.898869] cache 33620kB is below limit 65536kB for oom_score_adj 12 [ 1462.898869] Free memory is 944kB above reserved 14:52:24 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000002000000", @ANYRES32=r8, @ANYBLOB="08000200e000000238489d4aff2c2461bf01a07ca92469a363a3ccfb6bdc43fcb38a5380c97b272039b15228849bd9545eaf370aa01a6c184a"], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0", r8}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x304) r11 = timerfd_create(0x0, 0x0) timerfd_settime(r11, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r11, r10, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r12, 0x400454cd, 0x7) dup3(r13, r12, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r15, r14, 0x0) dup3(r15, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r16 = socket$inet(0x2, 0x0, 0x0) syncfs(r16) r17 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r17, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r18 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r18, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r18, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r19 = syz_open_dev$mice(&(0x7f0000000200)='/\x00', 0x0, 0x2c6600) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r20 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r20) r21 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r22 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r22, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r21, 0x4c00, r22) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r20, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r20, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r24, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r27, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r27, r25, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r19, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r23, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r21, r22, 0x0, 0x180003) 14:52:24 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:24 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000100)=0x3) getsockname(r3, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80) [ 1463.011825] lowmemorykiller: Killing 'syz-executor.3' (11223) (tgid 11223), adj 1000, [ 1463.011825] to free 52364kB on behalf of 'kswapd0' (33) because [ 1463.011825] cache 33620kB is below limit 65536kB for oom_score_adj 12 [ 1463.011825] Free memory is 11992kB above reserved 14:52:24 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x53, "e413342174144ad28d91498606b04cba6dd2109bd0e92101bb22bf3461ecb84771eb7f229af3a62b6654e1b831309d1bce9e4ca852210140d3bc2b93addaf4fd20225811b1f61a15f6322a984d591922065133"}, &(0x7f0000000440)=0x77) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) dup2(r2, r3) close(r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0xa2, "e1dfb48db8ef2d21142d7de1ebb62b52f87e18d7c3cf0c314fdc001183b65314a57433633b1ae9ba024ae83f6b9f9e7a759fa80951c0116d4e625ed445ac2e428c813030bba644cd4fd516ab7e1964c9cece52bb64fa994f18c1fcd789b5558b539cbdd89ef37c1ae4c95d1cb55127dafaef3bf50ccf97a99430af2cd3ca29d6d4f8c32ab53eb11d4300a7e27d175f61e0b1afbd87f3a176f7816c081a59870294f5"}, &(0x7f0000000580)=0xc6) io_submit(r6, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x10, 0x0, r5, &(0x7f0000000540)="63c4217b8b5c4a0c476c0b182e76e5ef09bf0d561820d0bd9e5ca912809f48f826332014a52e7ec0ced98787e67b75d251cae2d48f2dcd8601644593", 0x3c}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x269}]) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000380)='/dev/keychord\x00', 0x1, 0x0) io_cancel(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x8001, r7, &(0x7f00000002c0)="0f4b05e81532eb0a3374c7b07cd9cf1db0a8c3cc853ecec0d6a050b79751a217f2dc66cf8e3c87b1b5e5f1b9566423a550286ab0bf3c98355693d5a13a3085824bd41bb77259c69734414e5ec26c373f8ca4f9e8c26f6acdb7a33e1ed01634111ffc03d09cf531dd7b93c56287dbcb7ccf4cb25bd1f0b9e59fe74db18dc5d3076470b40225c5b647d3287b", 0x8b, 0x4, 0x0, 0x2, r8}, &(0x7f0000000400)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) splice(r9, 0x0, r10, 0x0, 0x1420800a74, 0x0) ppoll(&(0x7f0000000000)=[{r10, 0x1006}, {r0, 0x100}], 0x2, &(0x7f00000000c0), &(0x7f0000000200)={0x7ff}, 0x8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r11, &(0x7f0000000240)=ANY=[@ANYBLOB="4482680e1afaa12b7280b72cdea0686276bbfae48ad8f5a09509e88a4d7e5975c74ca1048db626768fca3e43f93b7cd3d8c47ded8a41000000"], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1463.098435] lowmemorykiller: Killing 'syz-executor.0' (4658) (tgid 4658), adj 1000, [ 1463.098435] to free 52360kB on behalf of 'kswapd0' (33) because [ 1463.098435] cache 33624kB is below limit 65536kB for oom_score_adj 12 [ 1463.098435] Free memory is 23584kB above reserved [ 1463.182594] lowmemorykiller: Killing 'syz-executor.1' (4670) (tgid 4670), adj 1000, [ 1463.182594] to free 52360kB on behalf of 'kswapd0' (33) because [ 1463.182594] cache 33624kB is below limit 65536kB for oom_score_adj 12 [ 1463.182594] Free memory is 36820kB above reserved [ 1463.238598] lowmemorykiller: Killing 'syz-executor.0' (4689) (tgid 4689), adj 1000, [ 1463.238598] to free 52360kB on behalf of 'kswapd0' (33) because [ 1463.238598] cache 33624kB is below limit 65536kB for oom_score_adj 12 [ 1463.238598] Free memory is 50020kB above reserved 14:52:25 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:25 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:25 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x109840, 0x0) ioctl$TIOCCONS(r0, 0x541d) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="626232d5", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fddbdf25100000000800050003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) splice(r1, &(0x7f0000000080)=0x279, r2, &(0x7f00000000c0)=0x80000001, 0x3b60, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') futimesat(r3, 0x0, 0x0) 14:52:25 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:25 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r20, r18, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(0xffffffffffffffff, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:25 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0xc8}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1463.775475] audit: type=1400 audit(1575039145.452:94): avc: denied { write } for pid=11357 comm="syz-executor.5" name="map_files" dev="proc" ino=170046 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 14:52:25 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1463.835984] lowmemorykiller: Killing 'syz-executor.1' (11309) (tgid 11309), adj 1000, [ 1463.835984] to free 52408kB on behalf of 'kswapd0' (33) because [ 1463.835984] cache 33632kB is below limit 65536kB for oom_score_adj 12 [ 1463.835984] Free memory is -6680kB above reserved [ 1463.904408] lowmemorykiller: Killing 'syz-executor.3' (11278) (tgid 11278), adj 1000, [ 1463.904408] to free 52392kB on behalf of 'kswapd0' (33) because [ 1463.904408] cache 33632kB is below limit 65536kB for oom_score_adj 12 [ 1463.904408] Free memory is 8044kB above reserved [ 1463.976397] lowmemorykiller: Killing 'syz-executor.3' (11354) (tgid 11354), adj 1000, [ 1463.976397] to free 52364kB on behalf of 'kswapd0' (33) because [ 1463.976397] cache 33632kB is below limit 65536kB for oom_score_adj 12 [ 1463.976397] Free memory is 19016kB above reserved [ 1464.033180] lowmemorykiller: Killing 'syz-executor.1' (4727) (tgid 4727), adj 1000, [ 1464.033180] to free 52360kB on behalf of 'kswapd0' (33) because [ 1464.033180] cache 33632kB is below limit 65536kB for oom_score_adj 12 [ 1464.033180] Free memory is 29632kB above reserved [ 1464.069325] lowmemorykiller: Killing 'syz-executor.0' (4731) (tgid 4731), adj 1000, [ 1464.069325] to free 52360kB on behalf of 'kswapd0' (33) because [ 1464.069325] cache 33632kB is below limit 65536kB for oom_score_adj 12 [ 1464.069325] Free memory is 34544kB above reserved 14:52:25 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) syncfs(0xffffffffffffffff) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:52:25 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$char_usb(0xc, 0xb4, 0x40) vmsplice(r1, &(0x7f0000000400)=[{&(0x7f0000000180)="9ee90ff1f44f73344020d017e6e3593635dc52697458d7270c26203d6b6552609b161dac099cb2c767c0ae3619de07491f209c82ad0922c4516575bc2d4fa4f1aa67b8600a41607486925155291c14a9c2c8576e1d39fb719533d8ff335c6b6616c68bef57fbff82852fc838b00290d5bf6611d034c34f7a2c19222e233ece4cb48c90fa5126c69dc6bf654fdb862569879527", 0x93}, {&(0x7f0000000240)="59e9d154dd297a7cd988747e58f16e56476a790501f7835c88aa1ee87040d9d044450d770274be50370a065eaa138ec6f77737918db69472e1225e4f2fa403d6e0ba5dceb7bf8a03364202ce532dd2ffbe67db3d1c8cb79d44226fb2ab07f4ee21adcdaa1e34d68fad4455ca42b5737c77b0ae14e80a6ea5a82012b7c0d2c10080c210413253ce39f8feab693f8d835e13d972f4658cdc0adfc8ff441f6e6c1b0a0129c694f4e3482193ca50515829f1d672996810f4d5911972bffc221d5aa3907836826ada0b7ea7684680a1f5619a53e03bf34f8d515b36655552bc98bfeea493b3355c9b03d9d864cd8291c70f", 0xef}, {&(0x7f0000000340)="7bd3fca046839faffe644a17edf39cbe1e32c880a86389ba5f09fb19e7e7056a26dde10e2e8bb1e7e232373822528fcfe091b5c3b49cf05c0f1427366e32a44cb646802c4cd8d92c4da896aed3d9597a71c440e78491003dc4134c5adc721cd84c021bb2dbca0ba982c5c7c38633b9b612baa0a857c45f82802fed335313c9779c9c3bf0ab12bc846783dd92da99e92568d5", 0x92}, {&(0x7f00000000c0)="8f9fb1bbcfef68adc51fd10df012dfccb56a8837e5ff2ba469c49e286f3876e8368ef926ec9eb6850134dcc140278eff46be3847c6d4a0adc4726c79b81f8a49fe25b75ccfee176ccdd8d199079a50be64b5dd4598e9164e38c25f065b31bbf2a4bbd27c", 0x64}, {&(0x7f00000004c0)="3472b50c53616b767a0a22f8856a053ed031a933f7f19029efea744917b6c454594e6722507088f19cbd0c4c82b6771953e3599b9efedd146a99f2c8ae6d228e3322d515ffa9ca66c54572afc320e45bfabeacd065d975a36a1a248db8dea2e7d49a761f3ad6131c6daafb87d3eb70ac4a365bee2c292b952fb5537f27dab7351ace9d33bb13b22404e06f7e6af070c6039858d7ef9f10fa40e31dc3e212976b58d21120b6f68b0f0045b2fd00eb73f23e8d7f7c9fc5b09ce203f76c578a13d22a63d0a0db", 0xc5}, {&(0x7f0000000640)="132c58fdabd1f492a5a7ae0286df74fd1eac8b14028a7b481c2474208062c28d2ff11e376f1ca2af18ed90e912cb5a688ab762614685256d74611234546ce70ec5d26cba179ce26be03e73dfd2e8564fbe9b9eed48d6c32e2fa6a4439b08e566bb085d34463ad31ef8eac79ea5ba4b9370432652cc24acd9b4a6c4948fee8b2e6fa1ff481a6a05e27cd7b5884a5c45cd409ea93f3254e7f341db5028a46179bb270aca22f103f690db705894520256bc7ff7645a91cf05589450a182cc0d375921e19c35b25f12da88a99d7ec471d767c0f53c7e929226def8a7e40f1d6fcb5cd3190f6b6b79c06a45b24c82e5f6dd10", 0xf0}], 0x6, 0x2) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="d229d71589fc42a1384b1fda90d1"], 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:25 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="08bb778c67eead79321eafd92c990447a66e1e4b9ec2cf2010db30f397df1d56e2064addf6fbf0261dcfa3010000004f7437be9eda25ab271e08e9b6f43f9a4646b0cad639ff3ba48ce2d04453cb93a6b652676c151a3420f9775596093ca2d22e5377aea2121dfbbb922f64e0c0b903345140ecd0bb61a5400b09f726216bebb63afa127606cbefc0aa7ed22a000000000000000000"], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:26 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:26 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) 14:52:26 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r4 = socket(0xa, 0x2, 0x6) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000507000000000000000000003300", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000002000000", @ANYRES32=r9, @ANYBLOB="08000200e000000238489d4aff2c2461bf01a07ca92469a363a3ccfb6bdc43fcb38a5380c97b272039b15228849bd9545eaf370aa01a6c184a"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000800)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@dev={0xfe, 0x80, [], 0x24}, r10}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x7) r13 = timerfd_create(0x0, 0x0) timerfd_settime(r13, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r13, r12, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40c000, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r14, 0x400454cd, 0x7) dup3(r15, r14, 0x0) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r17, r16, 0x0) dup3(r17, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r18 = socket$inet(0x2, 0x0, 0x0) syncfs(r18) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r20 = socket$nl_route(0x10, 0x3, 0x0) splice(r19, 0x0, r20, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r19, 0x4004556d, 0x8) ioctl$sock_inet_SIOCDARP(r19, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x2, @dev={[], 0x18}}, 0x0, {0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xc}}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r21 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r21, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r21, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r22 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r23 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r23) r24 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r25 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r25, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r23, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r23, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r27, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r29 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r30, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r30, r28, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x10000008, 0x0, 0x0, 0x3, 0x1f, 0x10000000000009, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r22, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r26, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r24, r25, 0x0, 0x180003) 14:52:26 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x53, "e413342174144ad28d91498606b04cba6dd2109bd0e92101bb22bf3461ecb84771eb7f229af3a62b6654e1b831309d1bce9e4ca852210140d3bc2b93addaf4fd20225811b1f61a15f6322a984d591922065133"}, &(0x7f0000000440)=0x77) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) dup2(r2, r3) close(r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0xa2, "e1dfb48db8ef2d21142d7de1ebb62b52f87e18d7c3cf0c314fdc001183b65314a57433633b1ae9ba024ae83f6b9f9e7a759fa80951c0116d4e625ed445ac2e428c813030bba644cd4fd516ab7e1964c9cece52bb64fa994f18c1fcd789b5558b539cbdd89ef37c1ae4c95d1cb55127dafaef3bf50ccf97a99430af2cd3ca29d6d4f8c32ab53eb11d4300a7e27d175f61e0b1afbd87f3a176f7816c081a59870294f5"}, &(0x7f0000000580)=0xc6) io_submit(r6, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x10, 0x0, r5, &(0x7f0000000540)="63c4217b8b5c4a0c476c0b182e76e5ef09bf0d561820d0bd9e5ca912809f48f826332014a52e7ec0ced98787e67b75d251cae2d48f2dcd8601644593", 0x3c}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x269}]) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000380)='/dev/keychord\x00', 0x1, 0x0) io_cancel(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x8001, r7, &(0x7f00000002c0)="0f4b05e81532eb0a3374c7b07cd9cf1db0a8c3cc853ecec0d6a050b79751a217f2dc66cf8e3c87b1b5e5f1b9566423a550286ab0bf3c98355693d5a13a3085824bd41bb77259c69734414e5ec26c373f8ca4f9e8c26f6acdb7a33e1ed01634111ffc03d09cf531dd7b93c56287dbcb7ccf4cb25bd1f0b9e59fe74db18dc5d3076470b40225c5b647d3287b", 0x8b, 0x4, 0x0, 0x2, r8}, &(0x7f0000000400)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r10 = socket$nl_route(0x10, 0x3, 0x0) splice(r9, 0x0, r10, 0x0, 0x1420800a74, 0x0) ppoll(&(0x7f0000000000)=[{r10, 0x1006}, {r0, 0x100}], 0x2, &(0x7f00000000c0), &(0x7f0000000200)={0x7ff}, 0x8) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r11, &(0x7f0000000240)=ANY=[@ANYBLOB="4482680e1afaa12b7280b72cdea0686276bbfae48ad8f5a09509e88a4d7e5975c74ca1048db626768fca3e43f93b7cd3d8c47ded8a41000000"], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:26 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB="4bbb9b88566282f98f86c04a92f5aa50a641ba", @ANYPTR, @ANYRES64=r4, @ANYRES64], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="dde0f2ca18a5", @ANYRES64, @ANYPTR64, @ANYBLOB="4a6c878aa2cdcbc0190a60c53b2e679cec5dcdb878584dc09299338cbf481f4eb6d6336f54175f1aa7c00301c81b4283d675", @ANYPTR64, @ANYRES64, @ANYRESHEX], @ANYRES32=r1, @ANYRES16, @ANYRESHEX]], 0x8) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:26 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) syncfs(0xffffffffffffffff) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:52:26 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$get_persistent(0x3, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, 0x0, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1464.761010] lowmemorykiller: Killing 'syz-executor.3' (11405) (tgid 11405), adj 1000, [ 1464.761010] to free 52364kB on behalf of 'kswapd0' (33) because [ 1464.761010] cache 33640kB is below limit 65536kB for oom_score_adj 12 [ 1464.761010] Free memory is -6716kB above reserved [ 1464.883405] lowmemorykiller: Killing 'syz-executor.0' (4812) (tgid 4812), adj 1000, [ 1464.883405] to free 52360kB on behalf of 'syz-executor.0' (11485) because [ 1464.883405] cache 33640kB is below limit 65536kB for oom_score_adj 12 [ 1464.883405] Free memory is -13360kB above reserved 14:52:26 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$get_persistent(0x3, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, 0x0, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1464.887302] lowmemorykiller: Killing 'syz-executor.0' (4812) (tgid 4812), adj 1000, [ 1464.887302] to free 52360kB on behalf of 'syz-executor.3' (11487) because [ 1464.887302] cache 33640kB is below limit 65536kB for oom_score_adj 12 [ 1464.887302] Free memory is -13360kB above reserved [ 1464.896988] lowmemorykiller: Killing 'syz-executor.1' (4815) (tgid 4815), adj 1000, [ 1464.896988] to free 52360kB on behalf of 'syz-executor.0' (11485) because [ 1464.896988] cache 33640kB is below limit 65536kB for oom_score_adj 12 [ 1464.896988] Free memory is -13260kB above reserved [ 1464.898956] lowmemorykiller: Killing 'syz-executor.1' (4843) (tgid 4843), adj 1000, [ 1464.898956] to free 52360kB on behalf of 'syz-executor.3' (11487) because [ 1464.898956] cache 33640kB is below limit 65536kB for oom_score_adj 12 [ 1464.898956] Free memory is -8760kB above reserved [ 1464.903080] lowmemorykiller: Killing 'syz-executor.0' (4845) (tgid 4845), adj 1000, [ 1464.903080] to free 52360kB on behalf of 'syz-executor.3' (11487) because [ 1464.903080] cache 33640kB is below limit 65536kB for oom_score_adj 12 [ 1464.903080] Free memory is 4820kB above reserved [ 1464.917158] lowmemorykiller: Killing 'syz-executor.0' (4845) (tgid 4845), adj 1000, [ 1464.917158] to free 52360kB on behalf of 'syz-executor.0' (11485) because [ 1464.917158] cache 33640kB is below limit 65536kB for oom_score_adj 12 [ 1464.917158] Free memory is 2420kB above reserved [ 1464.937081] lowmemorykiller: Killing 'syz-executor.1' (4912) (tgid 4912), adj 1000, [ 1464.937081] to free 52360kB on behalf of 'syz-executor.3' (11487) because [ 1464.937081] cache 33640kB is below limit 65536kB for oom_score_adj 12 [ 1464.937081] Free memory is 8020kB above reserved [ 1464.941841] lowmemorykiller: Killing 'syz-executor.1' (4912) (tgid 4912), adj 1000, [ 1464.941841] to free 52360kB on behalf of 'syz-executor.0' (11485) because [ 1464.941841] cache 33640kB is below limit 65536kB for oom_score_adj 12 [ 1464.941841] Free memory is 18720kB above reserved [ 1464.968767] lowmemorykiller: Killing 'syz-executor.1' (4953) (tgid 4953), adj 1000, [ 1464.968767] to free 52360kB on behalf of 'syz-executor.3' (11487) because [ 1464.968767] cache 33440kB is below limit 65536kB for oom_score_adj 12 [ 1464.968767] Free memory is 46928kB above reserved [ 1464.971745] lowmemorykiller: Killing 'syz-executor.0' (4913) (tgid 4913), adj 1000, [ 1464.971745] to free 52360kB on behalf of 'syz-executor.0' (11485) because [ 1464.971745] cache 33640kB is below limit 65536kB for oom_score_adj 12 14:52:26 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2000, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) r1 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r1, 0x80000000016, 0x0) ptrace(0x10, r1) ptrace$getregset(0x8, r1, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x4000, 0x0) [ 1464.971745] Free memory is 30920kB above reserved [ 1464.980185] lowmemorykiller: Killing 'syz-executor.0' (5007) (tgid 5007), adj 1000, [ 1464.980185] to free 52360kB on behalf of 'syz-executor.3' (11487) because [ 1464.980185] cache 33440kB is below limit 65536kB for oom_score_adj 12 [ 1464.980185] Free memory is 62028kB above reserved 14:52:27 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/deptmI\x04\x00', 0x309202, 0x0) socket(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\xe8\r\xca\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19d\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90x0}, &(0x7f00000001c0)=0xc) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r5, 0x0, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r3, r4, r6) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, r7) keyctl$chown(0x4, r7, 0x0, 0x0) 14:52:27 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:27 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) syncfs(0xffffffffffffffff) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r11, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:52:27 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r4 = socket(0xa, 0x2, 0x6) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000507000000000000000000003300", @ANYRES32=r9, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000014000100000000000000000002000000", @ANYRES32=r9, @ANYBLOB="08000200e000000238489d4aff2c2461bf01a07ca92469a363a3ccfb6bdc43fcb38a5380c97b272039b15228849bd9545eaf370aa01a6c184a"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000800)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@dev={0xfe, 0x80, [], 0x24}, r10}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x7) r13 = timerfd_create(0x0, 0x0) timerfd_settime(r13, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r13, r12, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40c000, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r14, 0x400454cd, 0x7) dup3(r15, r14, 0x0) r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r17, r16, 0x0) dup3(r17, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r18 = socket$inet(0x2, 0x0, 0x0) syncfs(r18) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r20 = socket$nl_route(0x10, 0x3, 0x0) splice(r19, 0x0, r20, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r19, 0x4004556d, 0x8) ioctl$sock_inet_SIOCDARP(r19, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x2, @dev={[], 0x18}}, 0x0, {0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xc}}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r21 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r21, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r21, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r22 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r23 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r23) r24 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r25 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r25, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r25) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r23, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r23, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r27, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r29 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r30, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r30, r28, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x10000008, 0x0, 0x0, 0x3, 0x1f, 0x10000000000009, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r22, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r26, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r24, r25, 0x0, 0x180003) 14:52:27 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$get_persistent(0x3, 0x0, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, 0x0, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:27 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0xa, 0x40) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:27 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:52:27 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:27 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="46922fbd7000fddbdf25100000000800050003000000476886b26fcab65ec0d90509e10db60a0c52dbd2b31def5bf54ad168ebe3cc3d2b5c793b83ec7921c186ac4e61043dbcf81b2cd09ec0d65204ce4566dbf2754d92f974b10ea869eed949fbb1a8a9213e1e94bfb801d1701049484b72328a1d3562af466ed0ece6ef897713a9bc74af4e4cb4ec2d6e01e1"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) dup(r2) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r3, &(0x7f0000000040)="e5b8a92ed2ceb2c82d3b60b3fbf18c77f32a99e4a1ab484b7d4c300714bc0439f9f4f47b6e8bffb96d00557cd1bf2a601e05e2d1e106c461911c54c5f2aff9c2fbc6261c4868f1a598c5325abc90d6", &(0x7f0000000100)=""/56, 0x2}, 0x20) 14:52:27 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480), 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:27 executing program 4: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) sendmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000000c0)=@ethernet={0x306, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)="b92ddd0b9d037cca6ab7deff4874753d3786d59c4ef804bc5ff1717c9138c9ee0997684d6e4dde8be3515dfe7d7c9dff03ce20904e52a9e39c804e013a84e81714dd563fbfcd3ba6b22eaffb17330e896876a536818d84784dbb329979538198be63a692f7a75bc55ac9bb255bf4d58913161edcc50af010d822130fea2b598c8cf6ae9773cf52f3b244de8a905796134c13641e35b184461d1fabf200d4bc7c6a84a1017765cb464b78144a420583c2c76d2a199a369823582f9ec7c91d4a5618699bcb89a234e979ac43c2e095", 0xce}, {&(0x7f00000003c0)="87c59a06281d4c75a204cabd569b849fbda849517bb4a369e141487ade833cdc2b201bce3934ddb6a419", 0x2a}, {&(0x7f0000000400)="95042c1b3c2f327bd47965773b1a980fb6f569e2ca81e13fcfdcf96cff757bab299eb9cbec05a6f65edce70f48a27b511fd20e8959509337894bb09fa017e9a8cf136438da086fef91bb24db7ac542410f680a", 0x53}, {&(0x7f0000000500)="af3ae9459142592ebd07b4389d831723e085a3a776bc35952970157fdc30f2bd1626281d4d209e9901f0b216ef79199761424644c9a7385afae783617be29c52abb69a047ad9c7eddb07d290fdb9716c4093e8c189850c02712c3f9a8bc3d04e90f0ab9481e843aa6a6e375cedfe2764805f258f8ec5f05c298e09b5e865", 0x7e}, {&(0x7f0000000580)="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", 0xfe}], 0x5}}, {{&(0x7f0000000700)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'hsr0\x00'}}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000780)="1f34578bcef731d4ae308bda5c73292f8c3db9caedad21a9b70a674782f8fb490bf1c940b5d5ffa2ddcb3a6e768be5911ac143365725481b6a98b5a22b064f04dfef764c6523c6948faa34fc8c15ef1758e1540c00339e6aac4a7d59da69721fb593ef3c825da0790acc3c456c6da65f8353114fde98ad08ae98", 0x7a}, {&(0x7f0000000800)="a600ee9c19d7fd6d78ab6069e92a5107fec0fce5bd4dccd1ffb6ab78c65d79c12813e189b419ecc56ea870951097954062ab0fc108c4e6b254eebf187a587bc64abe3fddebb4ee4b09", 0x49}, {&(0x7f0000000880)="d1950a2cee908c5792e6d5222fbe1fc6d0789e6c81f2b25148f76b72a22df0f06cee1e090326fcd60f8f5256e7c48ca33c30b5b639a5eafdcfc20be4967848e8a8ed3f550c093568fa3c2a1ccbb0a341ef", 0x51}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="63a69ae57ab88c72c7f42721528788dec9677e8fb1911a6855aa3fe32b3c70198ae71de0ee4dab130d7dd5b94746ded1df8bf04a273ec11f95f3f51015337db4ccc65e32da8c1d99aa73b9fa", 0x4c}], 0x5, &(0x7f0000001a00)}}], 0x2, 0x20001010) close(r0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @initdev, @loopback}, &(0x7f0000000080)=0xc) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100cd00390bb18dcc0fbb00734ea660ae243febc2e822557e334526ef724a10c34fa87e77565d22a058fe27505d586f9d942dc1f9c76fa018635ae1289024ca9ca98ce4cbbb5476bc375c2734712e93e77dd2646149d22c8f1db37aaa7fae99f02c17eb1e878cc0820dad44e6fbe9d55122ca089a95bc86b8c0f277712e6fdb8fbe0f2e5bd74a0ac1f5d500900858f1ffffffff000000004050977ccc994d3803a5d473952905ad3073470e6b586bf5c327c681f37d7ef1f03d4a1112c500"/200]) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:27 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb}, 0xb) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) futimesat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}) readv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/179, 0xb3}], 0x1) 14:52:28 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) fcntl$getown(0xffffffffffffffff, 0x9) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace$peeksig(0x4209, r2, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) getpgid(r2) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r4 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) r7 = timerfd_create(0x0, 0x0) dup3(r7, r6, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r11, r10, 0x0) dup3(r11, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet(0x2, 0x0, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r15 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r16 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r16) r17 = syz_open_dev$loop(&(0x7f0000000180), 0xff, 0x115002) r18 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r18, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r17, 0x4c00, r18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r16, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r20, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000001a40)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r22 = socket$nl_route(0x10, 0x3, 0x0) splice(r21, 0x0, r22, 0x0, 0x1420800a74, 0x0) fstat(r22, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r25, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r25, r23, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r19, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r17, r18, 0x0, 0x180003) [ 1466.335611] lowmemorykiller: Killing 'syz-executor.5' (11552) (tgid 11552), adj 1000, [ 1466.335611] to free 52472kB on behalf of 'kswapd0' (33) because [ 1466.335611] cache 33228kB is below limit 65536kB for oom_score_adj 12 [ 1466.335611] Free memory is -6696kB above reserved 14:52:28 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:28 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) [ 1466.442664] lowmemorykiller: Killing 'syz-executor.3' (11501) (tgid 11501), adj 1000, [ 1466.442664] to free 52384kB on behalf of 'kswapd0' (33) because [ 1466.442664] cache 33228kB is below limit 65536kB for oom_score_adj 12 [ 1466.442664] Free memory is -6116kB above reserved [ 1466.495924] lowmemorykiller: Killing 'syz-executor.1' (11542) (tgid 11542), adj 1000, [ 1466.495924] to free 52384kB on behalf of 'kswapd0' (33) because [ 1466.495924] cache 33228kB is below limit 65536kB for oom_score_adj 12 [ 1466.495924] Free memory is 8064kB above reserved [ 1466.547280] lowmemorykiller: Killing 'syz-executor.1' (11565) (tgid 11565), adj 1000, [ 1466.547280] to free 52384kB on behalf of 'kswapd0' (33) because [ 1466.547280] cache 33228kB is below limit 65536kB for oom_score_adj 12 [ 1466.547280] Free memory is 7048kB above reserved [ 1466.595087] lowmemorykiller: Killing 'syz-executor.3' (11483) (tgid 11483), adj 1000, [ 1466.595087] to free 52364kB on behalf of 'kswapd0' (33) because [ 1466.595087] cache 33228kB is below limit 65536kB for oom_score_adj 12 [ 1466.595087] Free memory is 22984kB above reserved [ 1466.637073] lowmemorykiller: Killing 'syz-executor.3' (11594) (tgid 11594), adj 1000, [ 1466.637073] to free 52364kB on behalf of 'kswapd0' (33) because [ 1466.637073] cache 33228kB is below limit 65536kB for oom_score_adj 12 [ 1466.637073] Free memory is 41404kB above reserved 14:52:28 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:28 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r12, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r13 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r14 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r14) r15 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r16 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r16, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r15, 0x4c00, r16) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r14, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r14, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, r19, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r13, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r17, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r15, r16, 0x0, 0x180003) 14:52:28 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(r0, &(0x7f0000000000)='io\x00') write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000c80)={0x1, 0x1, 0x1000, 0x4b, &(0x7f0000000b80)="9493fa823949ed62e2ea7982ef4e5d3ea06c880a2dfc6b7756943c1f562249acda7f202cd9f1ba920710faaa146d2c8717da054c4195e5c4720f8bddbb79251ed874be47732915e71b96a6", 0x6e, 0x0, &(0x7f0000000c00)="da139d1e92e8cf2a22c2029c18d8366bba99183458ae5478495b6bf06af7f15fb9e0bfcbcdba3ddfe89120a4486f50f14c1cc4efbf47959b906eb78202479eba3eafc0708ca6aafbe52354be3ea06059f20f66ec3ed3e74f8c8f67289856ed021409c76fd2728fe6d2b09d2cca6e"}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000b40)={0x32, 0x3, 0x0, {0x4, 0x11, 0x0, '^mime_type@\'eth1!'}}, 0x32) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[]}}, 0x30004081) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000034c0)={@local, @mcast2, @empty, 0x0, 0x40, 0x0, 0x100, 0xf2c, 0x80200206}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000340)=@add_del={0x2, &(0x7f0000000300)='nlmon0\x00'}) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000240)=0x3f, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c9313a0b14a1ef03d6404be650eb876f6911ada4dcfd094220bd3cd0bc0b394ac881c7a5706adfe1e74312d39292d00b51ecf0ffcbe66ea54acb55b4c1e4e290d658d", @ANYRES16, @ANYBLOB="000327bd7000ffdbdf250c0000006434f0d74e04d282f4000000100001007564703a73797a3200000000100001007564703a73797a3200000000380004001400010002004e23ac1414aa0000000000000000200002000a104e20000000000000000100000000"], 0x78}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) sendto$inet(r0, &(0x7f00000000c0)="e0", 0xffd4, 0x0, 0x0, 0x0) [ 1467.008466] lowmemorykiller: Killing 'syz-executor.3' (11648) (tgid 11648), adj 1000, [ 1467.008466] to free 52384kB on behalf of 'kswapd0' (33) because [ 1467.008466] cache 33232kB is below limit 65536kB for oom_score_adj 12 [ 1467.008466] Free memory is -6756kB above reserved 14:52:28 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000000700000b2cbd7000fbdbdf251f00000010001d000c00910048080000000000007d18a3e28fce069a4b49df8dd119a902ea4df8c9f9b05a44c3b6485456a44aa34c5e8e4f34fe84cc3a6e8ccbdffd8d91898d841a8996bc8d5e8df41d7c09da041130251c1187ef8dd34955eb36a9779fa068de3ead906c0834de0a344fe7efa93996f22b0d2eac0c6399ba089910ad022ead4d5616505540b1b2526cc3a9b3cee17ca7daee47efb6200c71b0f19d5f7eef8911f412ee779099e0128109021ee466959ca8b1036196c6695200"/224], 0xe0}, 0x1, 0x0, 0x0, 0x8050}, 0x4000000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a99258b9edefc62cd30bd6f81d77f5222a69f14b1a8eadb4eb5990dd1d3499844373345c2234d04adff2c3b40cf52fb0c8c98e61dbdc32033585fb2c862ef10710bb3275b78bc46574c4f3ed97976d8131b380e9b101f6ce60fccb7e2bbb74022890831107cd14605d8c0179bfe0f2bb2404715b18c047cc3029cec45b69fb4f2f4fea32e692a7acf2aaf4c49ae624e22033f8736ed5097ba2f9395277a49a65b9f451d8077d5111cd49e04c097b1ea9f7ef51bff981fafbfd260f4f3a2007511ef8d60a0d8d98c97bcb0e8a4286"], 0xce) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1467.146876] lowmemorykiller: Killing 'syz-executor.1' (5018) (tgid 5018), adj 1000, [ 1467.146876] to free 52360kB on behalf of 'kswapd0' (33) because [ 1467.146876] cache 33232kB is below limit 65536kB for oom_score_adj 12 [ 1467.146876] Free memory is -5896kB above reserved 14:52:28 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="af3108d9129b77bc0500"], 0x1) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x8001) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1467.189550] lowmemorykiller: Killing 'syz-executor.0' (5028) (tgid 5028), adj 1000, [ 1467.189550] to free 52360kB on behalf of 'kswapd0' (33) because [ 1467.189550] cache 33232kB is below limit 65536kB for oom_score_adj 12 [ 1467.189550] Free memory is 7868kB above reserved 14:52:29 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, 0x0, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:29 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1467.266970] lowmemorykiller: Killing 'syz-executor.1' (5045) (tgid 5045), adj 1000, [ 1467.266970] to free 52360kB on behalf of 'kswapd0' (33) because [ 1467.266970] cache 33232kB is below limit 65536kB for oom_score_adj 12 [ 1467.266970] Free memory is 24260kB above reserved 14:52:29 executing program 4: chroot(&(0x7f0000000000)='./file0\x00') pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="f7f7f3e193644d5d34142a103ec0d88005723c2fef1e87405460870316ece1ac3a9112fcfda1eea394750c1d231229a555a2af2b742cb772faee768b12b8994aa8938523c36aecc702d4dfaa202754fc1b42a945bad5626cae38a6159dcc9d475bb55f8438f6b83afa241ec3dfd4ecb9d05d63e3269aab93277860ef3d09faae09462463a5e764dd57e284002543ad2bab64e3e1bce4d615fe0fa8fd67b375e405b70b2c4d843ad13cbfeb152bf8c9b7de13a64ded21abb7d259cfe880c93d90e6274013493d88a2a9419cc3d85ab42ff79d79f70333a8e86cf617789dd8eab64ac8d958bca0f76b87c317c7d4ef26bb229430266da7", 0x5b}], 0x1, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8a"], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1467.334021] lowmemorykiller: Killing 'syz-executor.3' (11673) (tgid 11673), adj 1000, [ 1467.334021] to free 52364kB on behalf of 'kswapd0' (33) because [ 1467.334021] cache 33232kB is below limit 65536kB for oom_score_adj 12 [ 1467.334021] Free memory is 40868kB above reserved 14:52:29 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) clock_gettime(0x1, &(0x7f00000006c0)={0x0, 0x0}) timerfd_settime(r6, 0x0, &(0x7f0000000380)={{r7, r8+10000000}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x7) dup3(r10, r9, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r12, r11, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r13 = socket$inet(0x2, 0x0, 0x0) syncfs(r13) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r15, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r15, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r16 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r17 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r17) r18 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r19 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r19, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r18, 0x4c00, r19) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r17, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r17, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r21, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r24, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x2, 0x1, 0x7}, 0x100010114, r24, r22, 0x5, 0x10002, 0x9, 0xffffffffffffffff, 0x100000004, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x303, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r16, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4076, 0xfec}, {&(0x7f0000002fc0)=""/214, 0xd6}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0xc8}, {&(0x7f0000001b00)=""/68, 0x44}], 0x6) read(r20, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r18, r19, 0x0, 0x180003) 14:52:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = dup(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$key(0xf, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000c80)={0x1, 0x1, 0x1000, 0x4b, &(0x7f0000000b80)="9493fa823949ed62e2ea7982ef4e5d3ea06c880a2dfc6b7756943c1f562249acda7f202cd9f1ba920710faaa146d2c8717da054c4195e5c4720f8bddbb79251ed874be47732915e71b96a6", 0x6e, 0x0, &(0x7f0000000c00)="da139d1e92e8cf2a22c2029c18d8366bba99183458ae5478495b6bf06af7f15fb9e0bfcbcdba3ddfe89120a4486f50f14c1cc4efbf47959b906eb78202479eba3eafc0708ca6aafbe52354be3ea06059f20f66ec3ed3e74f8c8f67289856ed021409c76fd2728fe6d2b09d2cca6e"}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000b40)={0x32, 0x3, 0x0, {0x4, 0x11, 0x0, '^mime_type@\'eth1!'}}, 0x32) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[]}}, 0x30004081) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000034c0)={@local, @mcast2, @empty, 0x0, 0x40, 0x0, 0x100, 0xf2c, 0x80200206}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000340)=@add_del={0x2, &(0x7f0000000300)='nlmon0\x00'}) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000240)=0x3f, 0x4) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c9313a0b14a1ef03d6404be650eb876f6911ada4dcfd094220bd3cd0bc0b394ac881c7a5706adfe1e74312d39292d00b51ecf0ffcbe66ea54acb55b4c1e4e290d658d", @ANYRES16, @ANYBLOB="000327bd7000ffdbdf250c0000006434f0d74e04d282f4000000100001007564703a73797a3200000000100001007564703a73797a3200000000380004001400010002004e23ac1414aa0000000000000000200002000a104e20000000000000000100000000"], 0x78}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) sendto$inet(r0, &(0x7f00000000c0)="e0", 0xffd4, 0x0, 0x0, 0x0) 14:52:29 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:29 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, 0x0, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:29 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0xfffffffffffffe75, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x8) epoll_create1(0xa024beb1dfb252d1) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x3) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="dfd2cd80"], 0x4}}, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r6, 0xfffffffffffffffe, 0x0) ptrace(0x4207, r6) ptrace$peeksig(0x4209, r6, &(0x7f00000000c0)={0x0, 0x607ca6fa2ec12f46}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r6) ptrace$setopts(0x4206, r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="eabe9f303b222957eecbce24877c82526bedb013375512f95c7784", @ANYBLOB="e62322cb1bc17eb6009b3d81748d52864e01000000000fe70300757306000013a66864eef1c8e36e6b1758b6"], 0x0, 0x47}, 0x20) tkill(r4, 0x3b) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) [ 1468.040724] lowmemorykiller: Killing 'syz-executor.1' (11643) (tgid 11643), adj 1000, [ 1468.040724] to free 52392kB on behalf of 'kswapd0' (33) because [ 1468.040724] cache 33240kB is below limit 65536kB for oom_score_adj 12 [ 1468.040724] Free memory is -6656kB above reserved 14:52:29 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, 0x0, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:29 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) splice(r3, &(0x7f00000001c0)=0x1, r0, &(0x7f0000000200)=0x8, 0x8, 0x8) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:sound_device_t:s0\x00', 0x24, 0x2) close(r0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0042b0bd110d8663375fe1899fca43b97e315f8be750cfb53c6335192167a7661740ee05b1a9d60a2c97e28887ee984239479df65d6af3f29f7881e018000000004198c6927d4a14dbacbe8184e0fe9402893875fa67de0a516c5d69fdc71638e9534b163a52ad5ca576db4472bd1f10c880872508242c0bb16b8cc797ad94f7490708bac8fd0ba0592f30e9f70bf76d5fff66dbc667bd092a8263b19cf355f17c184d10d22420a131705b3ba20038a3"], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1468.145901] lowmemorykiller: Killing 'syz-executor.1' (11725) (tgid 11725), adj 1000, [ 1468.145901] to free 52392kB on behalf of 'kswapd0' (33) because [ 1468.145901] cache 32240kB is below limit 65536kB for oom_score_adj 12 [ 1468.145901] Free memory is -13112kB above reserved 14:52:29 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:29 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@dev={0xfe, 0x80, [], 0x29}, r4}, 0xfffffdfd) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r7, r6, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x7) dup3(r9, r8, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r11, r10, 0x0) dup3(r11, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet(0x2, 0x0, 0x0) syncfs(r12) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r14, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r14, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r15 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0xcc) r16 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r16) r17 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r18 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r18, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r17, 0x4c00, r18) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r16, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r16, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r20, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r23, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r23, r21, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r15, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r19, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r17, r18, 0x0, 0x180003) [ 1468.210374] lowmemorykiller: Killing 'syz-executor.1' (11790) (tgid 11745), adj 1000, [ 1468.210374] to free 52376kB on behalf of 'kswapd0' (33) because [ 1468.210374] cache 31840kB is below limit 65536kB for oom_score_adj 12 [ 1468.210374] Free memory is -3072kB above reserved 14:52:30 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, 0x0) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1468.317351] lowmemorykiller: Killing 'syz-executor.1' (11757) (tgid 11757), adj 1000, [ 1468.317351] to free 52376kB on behalf of 'kswapd0' (33) because [ 1468.317351] cache 31740kB is below limit 65536kB for oom_score_adj 12 [ 1468.317351] Free memory is -8104kB above reserved [ 1468.369212] audit: type=1400 audit(1575039150.052:95): avc: denied { relabelto } for pid=11801 comm="syz-executor.4" name="" dev="pipefs" ino=171029 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=fifo_file permissive=1 [ 1468.544953] lowmemorykiller: Killing 'syz-executor.3' (11735) (tgid 11735), adj 1000, [ 1468.544953] to free 52364kB on behalf of 'kswapd0' (33) because [ 1468.544953] cache 31660kB is below limit 65536kB for oom_score_adj 12 [ 1468.544953] Free memory is -6796kB above reserved 14:52:30 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1468.700040] lowmemorykiller: Killing 'syz-executor.3' (11776) (tgid 11776), adj 1000, [ 1468.700040] to free 52364kB on behalf of 'kswapd0' (33) because [ 1468.700040] cache 31660kB is below limit 65536kB for oom_score_adj 12 [ 1468.700040] Free memory is -9960kB above reserved [ 1468.806553] lowmemorykiller: Killing 'syz-executor.3' (11817) (tgid 11817), adj 1000, [ 1468.806553] to free 52384kB on behalf of 'kswapd0' (33) because [ 1468.806553] cache 31660kB is below limit 65536kB for oom_score_adj 12 [ 1468.806553] Free memory is -8968kB above reserved [ 1468.858810] lowmemorykiller: Killing 'syz-executor.0' (5056) (tgid 5056), adj 1000, [ 1468.858810] to free 52360kB on behalf of 'kswapd0' (33) because [ 1468.858810] cache 31660kB is below limit 65536kB for oom_score_adj 12 [ 1468.858810] Free memory is 2536kB above reserved 14:52:30 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1468.942137] lowmemorykiller: Killing 'syz-executor.0' (5074) (tgid 5074), adj 1000, [ 1468.942137] to free 52360kB on behalf of 'kswapd0' (33) because [ 1468.942137] cache 31660kB is below limit 65536kB for oom_score_adj 12 [ 1468.942137] Free memory is 14000kB above reserved 14:52:30 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) splice(r8, 0x0, r9, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r11 = socket$nl_route(0x10, 0x3, 0x0) splice(r10, 0x0, r11, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r10, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r12, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r13, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r13, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="46922fbd701afd50bc0ea1dbdf25100097e9e1b70100"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) dup3(0xffffffffffffffff, r13, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r15, r14, 0x0) dup3(r15, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r16 = socket$inet(0x2, 0x800, 0x0) syncfs(r16) socket$inet_tcp(0x2, 0x1, 0x0) r17 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r17, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r17, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r18 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r19 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r19) r20 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r21 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r21, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r20, 0x4c00, r21) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r19, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r19, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r23, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000380)='./bus/file0\x00', &(0x7f0000000880)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r26, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r26, r24, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r18, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r22, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r20, r21, 0x0, 0x180003) 14:52:30 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1469.004014] lowmemorykiller: Killing 'syz-executor.1' (11847) (tgid 11810), adj 1000, [ 1469.004014] to free 52384kB on behalf of 'kswapd0' (33) because [ 1469.004014] cache 31660kB is below limit 65536kB for oom_score_adj 12 [ 1469.004014] Free memory is 27224kB above reserved 14:52:30 executing program 5: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420800a74, 0x0) splice(r3, &(0x7f00000001c0)=0x1, r0, &(0x7f0000000200)=0x8, 0x8, 0x8) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:sound_device_t:s0\x00', 0x24, 0x2) close(r0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0042b0bd110d8663375fe1899fca43b97e315f8be750cfb53c6335192167a7661740ee05b1a9d60a2c97e28887ee984239479df65d6af3f29f7881e018000000004198c6927d4a14dbacbe8184e0fe9402893875fa67de0a516c5d69fdc71638e9534b163a52ad5ca576db4472bd1f10c880872508242c0bb16b8cc797ad94f7490708bac8fd0ba0592f30e9f70bf76d5fff66dbc667bd092a8263b19cf355f17c184d10d22420a131705b3ba20038a3"], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:30 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1469.347723] lowmemorykiller: Killing 'syz-executor.5' (11842) (tgid 11842), adj 1000, [ 1469.347723] to free 52420kB on behalf of 'kswapd0' (33) because [ 1469.347723] cache 31668kB is below limit 65536kB for oom_score_adj 12 [ 1469.347723] Free memory is -6816kB above reserved [ 1469.418383] lowmemorykiller: Killing 'syz-executor.1' (11841) (tgid 11841), adj 1000, [ 1469.418383] to free 52384kB on behalf of 'kswapd0' (33) because [ 1469.418383] cache 31668kB is below limit 65536kB for oom_score_adj 12 [ 1469.418383] Free memory is 5620kB above reserved [ 1469.475917] lowmemorykiller: Killing 'syz-executor.1' (5084) (tgid 5084), adj 1000, [ 1469.475917] to free 52360kB on behalf of 'kswapd0' (33) because [ 1469.475917] cache 31668kB is below limit 65536kB for oom_score_adj 12 [ 1469.475917] Free memory is 16240kB above reserved [ 1469.535954] lowmemorykiller: Killing 'syz-executor.0' (5115) (tgid 5115), adj 1000, [ 1469.535954] to free 52360kB on behalf of 'kswapd0' (33) because [ 1469.535954] cache 31668kB is below limit 65536kB for oom_score_adj 12 [ 1469.535954] Free memory is 24232kB above reserved [ 1469.585807] lowmemorykiller: Killing 'syz-executor.3' (11902) (tgid 11902), adj 1000, [ 1469.585807] to free 52364kB on behalf of 'kswapd0' (33) because [ 1469.585807] cache 31668kB is below limit 65536kB for oom_score_adj 12 [ 1469.585807] Free memory is 33208kB above reserved [ 1469.613031] lowmemorykiller: Killing 'syz-executor.1' (5116) (tgid 5116), adj 1000, [ 1469.613031] to free 52360kB on behalf of 'kswapd0' (33) because [ 1469.613031] cache 31668kB is below limit 65536kB for oom_score_adj 12 [ 1469.613031] Free memory is 49608kB above reserved 14:52:32 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/udp\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) splice(r2, &(0x7f0000000040)=0x5, r3, &(0x7f0000000080)=0x8, 0x3, 0xa) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:32 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:32 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) splice(r7, 0x0, r8, 0x0, 0x1420800a74, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r9, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r9, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r10 = dup3(r8, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r11, 0x400454cd, 0x7) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r12, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r14 = socket$nl_route(0x10, 0x3, 0x0) splice(r13, 0x0, r14, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r13, 0x4004556d, 0x8) dup3(r13, r10, 0x0) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r16, r15, 0x0) dup3(r16, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r17 = socket$inet(0x2, 0x0, 0x0) syncfs(r17) r18 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r18, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r19 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r19, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r19, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r20 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r21 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r21) r22 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r23 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r23, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r22, 0x4c00, r23) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r21, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r21, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r25, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000880)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r28, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r28, r26, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r20, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r24, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r22, r23, 0x0, 0x180003) 14:52:32 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:32 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812}) io_setup(0x20000000002, &(0x7f0000000240)=0x0) io_submit(r4, 0x2, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000180)='\f', 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) io_cancel(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x3ff, r5, &(0x7f00000001c0)="d79bd2740fc5ee4c51ed8fe27e2f0b9c87afde8d4250ec21c92d84415f9b6c22672bab615dd008669bff0b83b9ed75a3b2bd519a95d0a921a90b7c19b790f93a3f0791a18637a6ea15f40963b6eaef9e7cb2fa22c39dbc4f2370f99bf68f04ada8c71b5e943c24f6fd3f2610491beffe1dfe97b18da2db7d597884e910f97e59b9ffe2fd8eb192e3a8c88393be0528306f4672f4868d6638a6475e6b5e7e99dd2e14f27cac4df1b01f7f61a858a24f120f51cd59da9903a8da2ee7acce74e7c2103d71747976bb6005e3a76101e22c2b7aff40577d0ff9ea8ec51c93db55e4ecd231c1a2e0d991e51a4b34f26e17dc1d0bf43b9b6935a290f2", 0xf9, 0xddc, 0x0, 0x0, r7}, &(0x7f0000000080)) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 14:52:32 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:32 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r20, r18, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(0xffffffffffffffff, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:33 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:33 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, 0x0, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:33 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r20, r18, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(0xffffffffffffffff, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:33 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r20, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r20, r18, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(0xffffffffffffffff, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:33 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1471.710929] lowmemorykiller: Killing 'syz-executor.5' (11951) (tgid 11951), adj 1000, [ 1471.710929] to free 52416kB on behalf of 'kswapd0' (33) because [ 1471.710929] cache 31680kB is below limit 65536kB for oom_score_adj 12 [ 1471.710929] Free memory is -6704kB above reserved [ 1471.818887] lowmemorykiller: Killing 'syz-executor.3' (11949) (tgid 11949), adj 1000, [ 1471.818887] to free 52364kB on behalf of 'kswapd0' (33) because [ 1471.818887] cache 31680kB is below limit 65536kB for oom_score_adj 12 [ 1471.818887] Free memory is -2228kB above reserved 14:52:33 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000080)=[{r1, 0x4000}, {r2, 0x7b5303c537da7143}, {r1, 0x4}], 0x3, 0x80000000) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x400441, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) 14:52:33 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bridge_slave_1\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0x95, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x2, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0xffffffffffff8001, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:33 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1471.876451] lowmemorykiller: Killing 'syz-executor.1' (11973) (tgid 11973), adj 1000, [ 1471.876451] to free 52396kB on behalf of 'kswapd0' (33) because [ 1471.876451] cache 31680kB is below limit 65536kB for oom_score_adj 12 [ 1471.876451] Free memory is 6424kB above reserved 14:52:33 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r21, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r21, 0x0, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1471.954016] lowmemorykiller: Killing 'syz-executor.0' (5133) (tgid 5133), adj 1000, [ 1471.954016] to free 52360kB on behalf of 'kswapd0' (33) because [ 1471.954016] cache 31680kB is below limit 65536kB for oom_score_adj 12 [ 1471.954016] Free memory is 17172kB above reserved [ 1472.032682] lowmemorykiller: Killing 'syz-executor.5' (12005) (tgid 12005), adj 1000, [ 1472.032682] to free 52420kB on behalf of 'kswapd0' (33) because [ 1472.032682] cache 31680kB is below limit 65536kB for oom_score_adj 12 [ 1472.032682] Free memory is 27504kB above reserved 14:52:33 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e24, @rand_addr=0x5}}) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1472.105977] lowmemorykiller: Killing 'syz-executor.1' (5142) (tgid 5142), adj 1000, [ 1472.105977] to free 52360kB on behalf of 'kswapd0' (33) because [ 1472.105977] cache 31688kB is below limit 65536kB for oom_score_adj 12 [ 1472.105977] Free memory is 41152kB above reserved 14:52:33 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1472.250874] audit: type=1400 audit(1575039153.932:96): avc: denied { ioctl } for pid=12066 comm="syz-executor.4" path="socket:[171416]" dev="sockfs" ino=171416 ioctlcmd=0x8919 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1472.316591] [ 1472.316596] ====================================================== [ 1472.316598] [ INFO: possible circular locking dependency detected ] [ 1472.316604] 4.9.141+ #1 Not tainted [ 1472.316606] ------------------------------------------------------- 14:52:34 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) tee(0xffffffffffffffff, r1, 0x84, 0x4) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='.!\t'], 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) fcntl$dupfd(r4, 0x406, r5) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 1472.316612] syz-executor.4/12077 is trying to acquire lock: [ 1472.316636] (&p->lock){+.+.+.}, at: [] seq_read+0xdd/0x12d0 [ 1472.316638] but task is already holding lock: 14:52:34 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1472.316657] (&pipe->mutex/1){+.+.+.}, at: [] pipe_lock+0x5e/0x70 14:52:34 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1472.316659] which lock already depends on the new lock. [ 1472.316659] [ 1472.316662] [ 1472.316662] the existing dependency chain (in reverse order) is: [ 1472.316673] [ 1472.316673] -> #2 (&pipe->mutex/1){+.+.+.}: [ 1472.316683] lock_acquire+0x130/0x3e0 [ 1472.316695] mutex_lock_nested+0xc0/0x900 [ 1472.316700] fifo_open+0x15c/0x9e0 14:52:34 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x100000000009, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1472.316708] do_dentry_open+0x3ef/0xc90 [ 1472.316715] vfs_open+0x11c/0x210 [ 1472.316728] path_openat+0x542/0x2790 [ 1472.316734] do_filp_open+0x197/0x270 [ 1472.316744] do_open_execat+0x10f/0x640 [ 1472.316755] do_execveat_common.isra.14+0x687/0x1ed0 [ 1472.316765] SyS_execve+0x42/0x50 [ 1472.316774] do_syscall_64+0x19f/0x550 [ 1472.316781] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1472.316788] [ 1472.316788] -> #1 (&sig->cred_guard_mutex){+.+.+.}: [ 1472.316795] lock_acquire+0x130/0x3e0 [ 1472.316802] mutex_lock_killable_nested+0xcc/0x9f0 [ 1472.316811] lock_trace+0x44/0xc0 [ 1472.316818] proc_pid_syscall+0xa9/0x260 [ 1472.316832] proc_single_show+0xfd/0x170 [ 1472.316837] seq_read+0x4b6/0x12d0 [ 1472.316844] do_loop_readv_writev.part.1+0xd5/0x280 [ 1472.316850] do_readv_writev+0x56e/0x7b0 [ 1472.316856] vfs_readv+0x84/0xc0 14:52:34 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1472.316863] default_file_splice_read+0x451/0x7f0 [ 1472.316868] do_splice_to+0x10c/0x170 [ 1472.316875] splice_direct_to_actor+0x23f/0x7e0 14:52:34 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'sdx', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, r1) r2 = socket$inet(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setreuid(0xffffffffffffffff, r3) lstat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r3, r4) r5 = socket(0x0, 0x0, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0)=0x0) r8 = socket(0x10, 0x80002, 0x0) bind$netlink(r8, 0x0, 0x0) write(r8, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000b4bffc)=0x7, 0x4) sendto(r8, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) r9 = fcntl$getown(r8, 0x9) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000006c0)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) sendmsg$netlink(r6, &(0x7f0000000500)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x2a12208}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000280)={0xa8, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x10, 0x38, @str='{vmnet1)\x00'}, @nested={0x30, 0x1, [@typed={0x10, 0x8f, @str='/dev/loop#\x00'}, @typed={0xc, 0x45, @u64=0x2}, @typed={0x10, 0x8a, @str='/dev/loop#\x00'}]}, @typed={0x8, 0x83, @pid=r7}, @generic="253451597dd43377d9988586a9e76e52c48a6f2ca35093853643c5483feb507e598d97306f5c8f2456b58775fef117b742c555c127266dc304348e09bd19a736293b04519ebca5a90a0e853695"]}, 0xa8}, {&(0x7f0000000380)={0x48, 0x14, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x1, @u32=0x4}, @generic="f0ed7b91f6dc31eb608f9edb94a41385e114085b9d75c18136194798344fa38d287daf7ebb817b917d80beaa0df1"]}, 0x48}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r9, r12, r13}}}], 0x20}, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x4, 0x3, 0x8, 0x2, 0x34, 0x4, {0x1, 0x2, 0x5, 0x40, 0x4, 0x7ff, 0x200, 0x4, 0xfa, 0x1, 0xc, r3, r13, 0x5, 0x80000000}}}, 0x90) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r14 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r15, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r16, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r16, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$FS_IOC_FSGETXATTR(r16, 0x801c581f, &(0x7f0000000000)={0x8, 0x7, 0x6, 0x4, 0xaaca}) rt_tgsigqueueinfo(0x0, r14, 0x80000000016, 0x0) ptrace(0x10, r14) ptrace$getregset(0x8, r14, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:34 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1472.316881] do_splice_direct+0x1a3/0x270 [ 1472.316887] do_sendfile+0x4f0/0xc30 [ 1472.316893] SyS_sendfile64+0x144/0x160 [ 1472.316898] do_syscall_64+0x19f/0x550 [ 1472.316905] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 14:52:34 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x40, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1472.316912] [ 1472.316912] -> #0 (&p->lock){+.+.+.}: [ 1472.316917] __lock_acquire+0x3189/0x4a10 [ 1472.316923] lock_acquire+0x130/0x3e0 [ 1472.316930] mutex_lock_nested+0xc0/0x900 [ 1472.316935] seq_read+0xdd/0x12d0 [ 1472.316941] do_loop_readv_writev.part.1+0xd5/0x280 [ 1472.316947] do_readv_writev+0x56e/0x7b0 [ 1472.316953] vfs_readv+0x84/0xc0 [ 1472.316959] default_file_splice_read+0x451/0x7f0 [ 1472.316964] do_splice_to+0x10c/0x170 [ 1472.316971] SyS_splice+0x10d2/0x14d0 [ 1472.316976] do_syscall_64+0x19f/0x550 [ 1472.316983] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1472.316985] [ 1472.316985] other info that might help us debug this: [ 1472.316985] [ 1472.316996] Chain exists of: [ 1472.316996] &p->lock --> &sig->cred_guard_mutex --> &pipe->mutex/1 [ 1472.316996] [ 1472.316998] Possible unsafe locking scenario: [ 1472.316998] [ 1472.317000] CPU0 CPU1 [ 1472.317002] ---- ---- [ 1472.317007] lock(&pipe->mutex/1); [ 1472.317012] lock(&sig->cred_guard_mutex); [ 1472.317018] lock(&pipe->mutex/1); [ 1472.317022] lock(&p->lock); 14:52:34 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1472.317023] [ 1472.317023] *** DEADLOCK *** [ 1472.317023] [ 1472.317027] 1 lock held by syz-executor.4/12077: [ 1472.317042] #0: (&pipe->mutex/1){+.+.+.}, at: [] pipe_lock+0x5e/0x70 14:52:34 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x0, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1472.317044] [ 1472.317044] stack backtrace: [ 1472.317052] CPU: 0 PID: 12077 Comm: syz-executor.4 Not tainted 4.9.141+ #1 [ 1472.317067] ffff88007dadf2c8 ffffffff81b42e79 ffffffff83ca2fd0 ffffffff83caa290 [ 1472.317078] ffffffff83ca4fe0 ffff8800a45208d0 ffff8800a4520000 ffff88007dadf310 [ 1472.317088] ffffffff813fee40 0000000000000001 00000000a45208b0 0000000000000001 [ 1472.317089] Call Trace: [ 1472.317105] [] dump_stack+0xc1/0x128 [ 1472.317119] [] print_circular_bug.cold.36+0x2f7/0x432 [ 1472.317129] [] __lock_acquire+0x3189/0x4a10 [ 1472.317138] [] ? trace_hardirqs_on+0x10/0x10 [ 1472.317146] [] lock_acquire+0x130/0x3e0 [ 1472.317153] [] ? seq_read+0xdd/0x12d0 [ 1472.317160] [] ? seq_read+0xdd/0x12d0 [ 1472.317169] [] mutex_lock_nested+0xc0/0x900 [ 1472.317176] [] ? seq_read+0xdd/0x12d0 [ 1472.317183] [] ? mark_held_locks+0xc7/0x130 [ 1472.317192] [] ? mutex_trylock+0x3e0/0x3e0 [ 1472.317200] [] ? kasan_unpoison_shadow+0x35/0x50 [ 1472.317208] [] ? kasan_alloc_pages+0x38/0x40 [ 1472.317217] [] ? get_page_from_freelist+0xe92/0x1d80 [ 1472.317225] [] seq_read+0xdd/0x12d0 [ 1472.317233] [] ? seq_lseek+0x3c0/0x3c0 [ 1472.317241] [] ? __fsnotify_inode_delete+0x30/0x30 [ 1472.317251] [] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 1472.317259] [] do_loop_readv_writev.part.1+0xd5/0x280 [ 1472.317267] [] do_readv_writev+0x56e/0x7b0 [ 1472.317274] [] ? vfs_write+0x520/0x520 [ 1472.317282] [] ? kasan_unpoison_shadow+0x35/0x50 [ 1472.317291] [] ? push_pipe+0x3e2/0x770 [ 1472.317301] [] ? iov_iter_get_pages_alloc+0x2be/0xee0 [ 1472.317309] [] vfs_readv+0x84/0xc0 [ 1472.317317] [] default_file_splice_read+0x451/0x7f0 [ 1472.317324] [] ? do_splice_direct+0x270/0x270 [ 1472.317332] [] ? trace_hardirqs_on+0x10/0x10 [ 1472.317339] [] ? trace_hardirqs_on+0x10/0x10 [ 1472.317347] [] ? trace_hardirqs_on+0x10/0x10 [ 1472.317356] [] ? __fsnotify_inode_delete+0x30/0x30 [ 1472.317365] [] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 1472.317375] [] ? avc_policy_seqno+0x9/0x20 [ 1472.317389] [] ? selinux_file_permission+0x82/0x470 [ 1472.317402] [] ? security_file_permission+0x8f/0x1e0 [ 1472.317411] [] ? rw_verify_area+0xe5/0x2a0 [ 1472.317427] [] ? do_splice_direct+0x270/0x270 [ 1472.317437] [] do_splice_to+0x10c/0x170 [ 1472.317447] [] SyS_splice+0x10d2/0x14d0 [ 1472.317459] [] ? __might_fault+0x114/0x1d0 [ 1472.317468] [] ? compat_SyS_vmsplice+0x160/0x160 [ 1472.317476] [] ? do_syscall_64+0x48/0x550 [ 1472.317484] [] ? compat_SyS_vmsplice+0x160/0x160 [ 1472.317490] [] do_syscall_64+0x19f/0x550 [ 1472.317499] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1472.471436] lowmemorykiller: Killing 'syz-executor.3' (12024) (tgid 12024), adj 1000, [ 1472.471436] to free 52392kB on behalf of 'kswapd0' (33) because [ 1472.471436] cache 31684kB is below limit 65536kB for oom_score_adj 12 [ 1472.471436] Free memory is -6692kB above reserved [ 1472.472062] lowmemorykiller: Killing 'syz-executor.1' (5189) (tgid 5189), adj 1000, [ 1472.472062] to free 52360kB on behalf of 'kswapd0' (33) because [ 1472.472062] cache 31684kB is below limit 65536kB for oom_score_adj 12 [ 1472.472062] Free memory is -7032kB above reserved [ 1472.757827] lowmemorykiller: Killing 'syz-executor.3' (12079) (tgid 12079), adj 1000, [ 1472.757827] to free 52364kB on behalf of 'kswapd0' (33) because [ 1472.757827] cache 31584kB is below limit 65536kB for oom_score_adj 12 [ 1472.757827] Free memory is -6712kB above reserved [ 1472.766182] lowmemorykiller: Killing 'syz-executor.1' (5202) (tgid 5202), adj 1000, [ 1472.766182] to free 52360kB on behalf of 'kswapd0' (33) because [ 1472.766182] cache 31584kB is below limit 65536kB for oom_score_adj 12 [ 1472.766182] Free memory is -6712kB above reserved [ 1472.775842] lowmemorykiller: Killing 'syz-executor.0' (5211) (tgid 5211), adj 1000, [ 1472.775842] to free 52360kB on behalf of 'kswapd0' (33) because [ 1472.775842] cache 31584kB is below limit 65536kB for oom_score_adj 12 [ 1472.775842] Free memory is 13088kB above reserved [ 1472.969708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28265 sclass=netlink_route_socket pig=12155 comm=syz-executor.2 [ 1473.131576] lowmemorykiller: Killing 'syz-executor.1' (12122) (tgid 12122), adj 1000, [ 1473.131576] to free 52384kB on behalf of 'kswapd0' (33) because [ 1473.131576] cache 31584kB is below limit 65536kB for oom_score_adj 12 [ 1473.131576] Free memory is -6740kB above reserved [ 1473.132281] lowmemorykiller: Killing 'syz-executor.1' (12145) (tgid 12145), adj 1000, [ 1473.132281] to free 52384kB on behalf of 'kswapd0' (33) because [ 1473.132281] cache 31584kB is below limit 65536kB for oom_score_adj 12 [ 1473.132281] Free memory is -6988kB above reserved [ 1473.132708] lowmemorykiller: Killing 'syz-executor.3' (12116) (tgid 12116), adj 1000, [ 1473.132708] to free 52364kB on behalf of 'kswapd0' (33) because [ 1473.132708] cache 31584kB is below limit 65536kB for oom_score_adj 12 [ 1473.132708] Free memory is -7236kB above reserved [ 1473.138557] lowmemorykiller: Killing 'syz-executor.1' (5227) (tgid 5227), adj 1000, [ 1473.138557] to free 52360kB on behalf of 'kswapd0' (33) because [ 1473.138557] cache 31484kB is below limit 65536kB for oom_score_adj 12 [ 1473.138557] Free memory is -2136kB above reserved [ 1473.484146] lowmemorykiller: Killing 'syz-executor.3' (12188) (tgid 12188), adj 1000, [ 1473.484146] to free 52364kB on behalf of 'kswapd0' (33) because [ 1473.484146] cache 31484kB is below limit 65536kB for oom_score_adj 12 [ 1473.484146] Free memory is -6724kB above reserved [ 1473.495527] lowmemorykiller: Killing 'syz-executor.0' (5231) (tgid 5231), adj 1000, [ 1473.495527] to free 52360kB on behalf of 'kswapd0' (33) because [ 1473.495527] cache 31484kB is below limit 65536kB for oom_score_adj 12 [ 1473.495527] Free memory is -6724kB above reserved [ 1473.505532] lowmemorykiller: Killing 'syz-executor.0' (5279) (tgid 5279), adj 1000, 14:52:35 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nei/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd6}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0xc8}, {&(0x7f0000000800)=""/68, 0x44}], 0x6) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:35 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1e124e9596098aeefdf7295435efcba4de20ac1dd5ebb05bfd59b842c6b83b2deab04db06afbb659c4452fdce757b1e2df96c8843944790f6faae9d30f1b96437ce119cd539e088f1c1a603ef4f6fde3cafe830359437a40fa221c1388a46aa452df02f37301765d99d725af839a6a77c79bd99b2d5f3faeafffab9adde91805174e0410626036094cf48fa041ec1a36d7a70fd43b610a3a5b1251a1dd88941245467b8a592ced3ecb9a4c", 0xab}, {&(0x7f00000014c0)="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", 0x10d5}, {&(0x7f0000000100)="fe588b36fa489fa9ba2e635706f16a077ac187da0fd935079386a3dbeef6ec5848a3917bf6e72e99f6d42b", 0x2b}, {&(0x7f0000000280)="ab6964c0abe770962562eef93010b5", 0xf}], 0x4, 0xa) close(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) fcntl$dupfd(r1, 0x0, r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="6d98dff5cb9f27121119cc439dbd90a510fc54e8c1562dc5e96382372f84023eb1105252c203f27e98451164492eefbac4b204011568f5d411f2ecf86bfd5ebd29ba84ef159345f72aa23be0cd0b2902db9b188382ed17cb6adb67cc0f296c3075dc7249a08cac461db5040bda9d2770dc49fcc0c9685c4189dcf59e538cb987d7b3666ec36365a202f26108476ebc69e408c5213c0e243c423a2aab4ddd3378c6cbb14bacc03e3c71f8"], 0xaa) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1473.505532] to free 52360kB on behalf of 'kswapd0' (33) because [ 1473.505532] cache 31484kB is below limit 65536kB for oom_score_adj 12 [ 1473.505532] Free memory is 24076kB above reserved 14:52:35 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:35 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x0, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:35 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) tee(0xffffffffffffffff, r1, 0x84, 0x4) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='.!\t'], 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) fcntl$dupfd(r4, 0x406, r5) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14:52:35 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_TIMERSLACK(0x1d, 0x800) poll(0x0, 0x0, 0xffffffff) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0x80, 0xf0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000340)) r3 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x18, 0x10, "5ae9f30e911d934b12ab2fa8bffd63113898c9cf082d2a961d9f40d4e7f82a0000000000010400001a9d5b2912ab0634296a74cbb4912ce96100", "4918b31d6c5d95c1eb7ded5b8600", [0x3, 0x8]}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r3, 0x80000000016, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000001c0)=0x10) ptrace(0x10, r3) ptrace$getregset(0x8, r3, 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000200)) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:35 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40c000, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @multicast1}, {0x1, @random="59c88403caf1"}, 0x79154553a9ae3caa, {0x2, 0x4e23, @empty}, 'veth0_to_bridge\x00'}) close(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) utime(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0xb5e, 0x1fb4800000}) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) exit(0x8) [ 1474.298408] lowmemorykiller: Killing 'syz-executor.1' (5280) (tgid 5280), adj 1000, [ 1474.298408] to free 52360kB on behalf of 'kswapd0' (33) because [ 1474.298408] cache 31536kB is below limit 65536kB for oom_score_adj 12 [ 1474.298408] Free memory is -6736kB above reserved [ 1474.375785] lowmemorykiller: Killing 'syz-executor.1' (5317) (tgid 5317), adj 1000, [ 1474.375785] to free 52360kB on behalf of 'syz-executor.0' (12237) because [ 1474.375785] cache 31536kB is below limit 65536kB for oom_score_adj 12 [ 1474.375785] Free memory is -13280kB above reserved [ 1474.376386] lowmemorykiller: Killing 'syz-executor.0' (5321) (tgid 5321), adj 1000, [ 1474.376386] to free 52360kB on behalf of 'syz-executor.0' (12237) because [ 1474.376386] cache 31536kB is below limit 65536kB for oom_score_adj 12 [ 1474.376386] Free memory is -13280kB above reserved [ 1474.386114] lowmemorykiller: Killing 'syz-executor.1' (5317) (tgid 5317), adj 1000, [ 1474.386114] to free 52360kB on behalf of 'syz-executor.3' (12241) because 14:52:36 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x0, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:36 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1474.386114] cache 31536kB is below limit 65536kB for oom_score_adj 12 [ 1474.386114] Free memory is -13280kB above reserved [ 1474.396334] lowmemorykiller: Killing 'syz-executor.1' (5340) (tgid 5340), adj 1000, [ 1474.396334] to free 52360kB on behalf of 'syz-executor.1' (12244) because [ 1474.396334] cache 31536kB is below limit 65536kB for oom_score_adj 12 [ 1474.396334] Free memory is -13280kB above reserved [ 1474.408405] lowmemorykiller: Killing 'syz-executor.1' (5363) (tgid 5363), adj 1000, [ 1474.408405] to free 52360kB on behalf of 'syz-executor.1' (12244) because [ 1474.408405] cache 31336kB is below limit 65536kB for oom_score_adj 12 [ 1474.408405] Free memory is 35988kB above reserved [ 1474.424150] lowmemorykiller: Killing 'syz-executor.0' (5338) (tgid 5338), adj 1000, [ 1474.424150] to free 52360kB on behalf of 'syz-executor.3' (12241) because [ 1474.424150] cache 31336kB is below limit 65536kB for oom_score_adj 12 [ 1474.424150] Free memory is 10920kB above reserved 14:52:36 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r19, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r19, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) write(r19, &(0x7f0000000940)="1b9003d03b6bdd91e3c1d3662165e456d253fe04af8c34cf0beb0aa4bceeaf6761b6800e20c06e96e1a6d45d1487775ba105b7bdc0eb46cd59e92d4a1da12cd1994e59919a5afbfe02e006877065b974da45287112f95c99381665759c1280cf15c5af2e55b186619fb5c918234d73f893302b83a720522aefe9d87e5ac3a7190c4a619a61beff91110002f923b6a355", 0xffffffffffffffd0) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80), 0x1000000000000028) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1474.428280] lowmemorykiller: Killing 'syz-executor.0' (5373) (tgid 5373), adj 1000, [ 1474.428280] to free 52360kB on behalf of 'syz-executor.1' (12244) because [ 1474.428280] cache 31336kB is below limit 65536kB for oom_score_adj 12 [ 1474.428280] Free memory is 55188kB above reserved 14:52:36 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x0, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:36 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:36 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:36 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCNXCL(r0, 0x540d) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8) accept$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x114}], 0x1, 0x0) close(r1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000080)=""/107) write$selinux_attr(r2, &(0x7f0000000000)='system_u:object_r:cpu_device_t:s0\x00', 0x22) write$binfmt_misc(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'], 0x1) splice(r1, 0x0, r2, 0x0, 0x200, 0x0) 14:52:36 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0xffffffff) r0 = getpid() pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x80000000016, 0x0) getsockopt$inet_int(r1, 0x0, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ptrace(0x10, r0) ptrace$getregset(0x8, r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x0, 0x0) 14:52:36 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x0, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:36 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x1420800a74, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x8) tee(0xffffffffffffffff, r1, 0x84, 0x4) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r3 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write$binfmt_script(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='.!\t'], 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x383e5512a1ca9246, 0x70bd2f, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) fcntl$dupfd(r4, 0x406, r5) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 14:52:36 executing program 4: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="f7f7", 0x2}], 0x1, 0x0) close(r0) pipe(&(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='P'], 0x1) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 1475.236814] lowmemorykiller: Killing 'syz-executor.1' (12235) (tgid 12235), adj 1000, [ 1475.236814] to free 52380kB on behalf of 'kswapd0' (33) because [ 1475.236814] cache 30896kB is below limit 65536kB for oom_score_adj 12 [ 1475.236814] Free memory is -6628kB above reserved 14:52:36 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1475.288985] lowmemorykiller: Killing 'syz-executor.3' (12231) (tgid 12231), adj 1000, [ 1475.288985] to free 52364kB on behalf of 'kswapd0' (33) because [ 1475.288985] cache 30896kB is below limit 65536kB for oom_score_adj 12 [ 1475.288985] Free memory is 5380kB above reserved [ 1475.331585] lowmemorykiller: Killing 'syz-executor.3' (12308) (tgid 12308), adj 1000, [ 1475.331585] to free 52364kB on behalf of 'kswapd0' (33) because [ 1475.331585] cache 30896kB is below limit 65536kB for oom_score_adj 12 [ 1475.331585] Free memory is 13728kB above reserved [ 1475.365953] lowmemorykiller: Killing 'syz-executor.3' (12336) (tgid 12336), adj 1000, [ 1475.365953] to free 52364kB on behalf of 'kswapd0' (33) because [ 1475.365953] cache 30896kB is below limit 65536kB for oom_score_adj 12 14:52:37 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x0, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) [ 1475.365953] Free memory is 26840kB above reserved [ 1475.425821] lowmemorykiller: Killing 'syz-executor.1' (5401) (tgid 5401), adj 1000, [ 1475.425821] to free 52360kB on behalf of 'kswapd0' (33) because [ 1475.425821] cache 30896kB is below limit 65536kB for oom_score_adj 12 [ 1475.425821] Free memory is 41008kB above reserved [ 1475.485822] lowmemorykiller: Killing 'syz-executor.0' (5405) (tgid 5405), adj 1000, [ 1475.485822] to free 52360kB on behalf of 'kswapd0' (33) because [ 1475.485822] cache 30896kB is below limit 65536kB for oom_score_adj 12 [ 1475.485822] Free memory is 53036kB above reserved 14:52:37 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd4706e0ff4143aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, &(0x7f00000000c0), 0xfdf5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:37 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) dup3(r10, r9, 0x0) dup3(r10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet(0x2, 0x0, 0x0) syncfs(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r12, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf9\xf7\xe9#\x00'}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r13, 0x8953, &(0x7f0000000500)={{0x2, 0x0, @multicast1}, {0x0, @random="d97515d6a291"}, 0x10, {0x2, 0x400, @rand_addr=0xfffffff8}, '\x02\x03\x00\x00\x00\x00\x00\xb7\xe4\xd3=\t\x00'}) setsockopt$inet_tcp_int(r13, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x1, 0x4) r14 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2c6400) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x9b700810fd5f601b, 0x1, 0x0) r15 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r15) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105082) r17 = memfd_create(&(0x7f0000000100)='/dev/keychord\x00', 0x0) pwritev(r17, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r15, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$setstatus(r15, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r19, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001a40)) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$get_persistent(0x3, r22, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x1120, {0x0, 0x1, 0x7}, 0x100010114, r22, r20, 0x5, 0x10000, 0x9, 0x1, 0x4, 0x8, 0x0, 0x0, 0x3, 0x1f, 0x4, 0x0, 0x3}}, 0xa0) readv(r14, &(0x7f0000001b80)=[{&(0x7f0000001dc0)=""/4087, 0xff7}, {&(0x7f0000002fc0)=""/214, 0xd4}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000680)=""/53, 0x35}, {&(0x7f0000002ec0)=""/200, 0x12e}, {&(0x7f0000001b00)=""/68, 0x44}], 0x157) read(r18, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r16, r17, 0x0, 0x180003) 14:52:37 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r1) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@mcast2}, 0x14) r3 = socket(0xa, 0x2, 0x6) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000a1aff7)={@rand_addr="4dafcd478c2d0b4833aace9e152a2fa0"}, 0x14) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thsead\xads^lf/aptr/curre\xf9\x9a\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x7) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000140)={{}, {0x0, 0x1c9c380}}, &(0x7f0000af9ff0)) dup3(r6, r5, 0x80000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/load\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x7) dup3(r8, r7, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00-\xd5\xfc\'\"\xc1\x00', 0x400, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nr0\x01\x00\x00\x00\xf2\xff\xff\xfe\x00\x00@\x00', 0x6}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff})