, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:48 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:48 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 12 printk messages dropped ** [ 931.504691] lowmemorykiller: Killing 'syz-executor.5' (9790) (tgid 9790), adj 1000, [ 931.504691] to free 52248kB on behalf of 'kswapd0' (33) because [ 931.504691] cache 12608kB is below limit 16384kB for oom_score_adj 6 [ 931.504691] Free memory is -6768kB above reserved [ 931.517157] lowmemorykiller: Killing 'syz-executor.0' (9855) (tgid 9855), adj 1000, [ 931.517157] to free 52248kB on behalf of 'kswapd0' (33) because 18:00:49 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 931.517157] cache 12608kB is below limit 16384kB for oom_score_adj 6 [ 931.517157] Free memory is -5668kB above reserved [ 931.526976] lowmemorykiller: Killing 'syz-executor.0' (9783) (tgid 9783), adj 1000, [ 931.526976] to free 52244kB on behalf of 'kswapd0' (33) because [ 931.526976] cache 12584kB is below limit 65536kB for oom_score_adj 12 [ 931.526976] Free memory is 19476kB above reserved 18:00:49 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x0, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:49 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 931.549794] lowmemorykiller: Killing 'syz-executor.0' (9824) (tgid 9824), adj 1000, [ 931.549794] to free 52244kB on behalf of 'kswapd0' (33) because [ 931.549794] cache 12584kB is below limit 65536kB for oom_score_adj 12 [ 931.549794] Free memory is 36032kB above reserved [ 931.572032] lowmemorykiller: Killing 'syz-executor.1' (9818) (tgid 9818), adj 1000, [ 931.572032] to free 52240kB on behalf of 'kswapd0' (33) because [ 931.572032] cache 12584kB is below limit 65536kB for oom_score_adj 12 [ 931.572032] Free memory is 54580kB above reserved 18:00:49 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:49 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 931.638324] input: syz1 as /devices/virtual/input/input4528 [ 931.641508] input: syz1 as /devices/virtual/input/input4529 [ 931.695268] input: syz1 as /devices/virtual/input/input4530 ** 7 printk messages dropped ** [ 932.348828] lowmemorykiller: Killing 'syz-executor.3' (9875) (tgid 9875), adj 1000, [ 932.348828] to free 52248kB on behalf of 'kswapd0' (33) because [ 932.348828] cache 12584kB is below limit 16384kB for oom_score_adj 6 [ 932.348828] Free memory is 15596kB above reserved 18:00:50 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:50 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x0, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 932.366472] lowmemorykiller: Killing 'syz-executor.0' (9893) (tgid 9893), adj 1000, [ 932.366472] to free 52248kB on behalf of 'kswapd0' (33) because [ 932.366472] cache 12584kB is below limit 16384kB for oom_score_adj 6 [ 932.366472] Free memory is 15348kB above reserved [ 932.385792] lowmemorykiller: Killing 'syz-executor.5' (9904) (tgid 9904), adj 1000, [ 932.385792] to free 52248kB on behalf of 'kswapd0' (33) because [ 932.385792] cache 12584kB is below limit 65536kB for oom_score_adj 12 18:00:50 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 932.385792] Free memory is 37200kB above reserved 18:00:50 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 932.403029] lowmemorykiller: Killing 'syz-executor.1' (9850) (tgid 9850), adj 1000, [ 932.403029] to free 52240kB on behalf of 'kswapd0' (33) because [ 932.403029] cache 12584kB is below limit 65536kB for oom_score_adj 12 [ 932.403029] Free memory is 52248kB above reserved [ 932.598786] input: syz1 as /devices/virtual/input/input4536 [ 932.632294] input: syz1 as /devices/virtual/input/input4537 [ 932.674402] input: syz1 as /devices/virtual/input/input4538 [ 932.711897] input: syz1 as /devices/virtual/input/input4539 [ 932.771114] input: syz1 as /devices/virtual/input/input4540 [ 932.911676] input: syz1 as /devices/virtual/input/input4541 [ 933.054964] lowmemorykiller: Killing 'syz-executor.5' (9953) (tgid 9953), adj 1000, [ 933.054964] to free 52256kB on behalf of 'kswapd0' (33) because [ 933.054964] cache 12544kB is below limit 16384kB for oom_score_adj 6 [ 933.054964] Free memory is -6760kB above reserved [ 933.057704] lowmemorykiller: Killing 'syz-executor.3' (9943) (tgid 9943), adj 1000, [ 933.057704] to free 52252kB on behalf of 'kswapd0' (33) because [ 933.057704] cache 12544kB is below limit 16384kB for oom_score_adj 6 [ 933.057704] Free memory is -7008kB above reserved 18:00:50 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:50 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x0, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:50 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:50 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:50 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:50 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x0, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 2 printk messages dropped ** [ 933.096787] lowmemorykiller: Killing 'syz-executor.3' (27317) (tgid 27317), adj 1000, [ 933.096787] to free 51608kB on behalf of 'kswapd0' (33) because [ 933.096787] cache 12544kB is below limit 65536kB for oom_score_adj 12 [ 933.096787] Free memory is 22192kB above reserved 18:00:50 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:51 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:51 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 933.117850] lowmemorykiller: Killing 'syz-executor.3' (27398) (tgid 27398), adj 1000, [ 933.117850] to free 51608kB on behalf of 'kswapd0' (33) because [ 933.117850] cache 12544kB is below limit 65536kB for oom_score_adj 12 [ 933.117850] Free memory is 56028kB above reserved [ 933.295066] input: syz1 as /devices/virtual/input/input4542 18:00:51 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 933.295844] input: syz1 as /devices/virtual/input/input4543 [ 933.315839] input: syz1 as /devices/virtual/input/input4544 [ 933.360873] input: syz1 as /devices/virtual/input/input4545 18:00:51 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x0, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 933.707725] input: syz1 as /devices/virtual/input/input4546 [ 933.786866] lowmemorykiller: Killing 'syz-executor.0' (9972) (tgid 9972), adj 1000, [ 933.786866] to free 52252kB on behalf of 'kswapd0' (33) because [ 933.786866] cache 12544kB is below limit 16384kB for oom_score_adj 6 [ 933.786866] Free memory is -5852kB above reserved [ 933.786875] lowmemorykiller: Killing 'syz-executor.0' (9972) (tgid 9972), adj 1000, [ 933.786875] to free 52252kB on behalf of 'kworker/u4:1' (29453) because [ 933.786875] cache 12544kB is below limit 16384kB for oom_score_adj 6 [ 933.786875] Free memory is -5852kB above reserved 18:00:51 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 3 printk messages dropped ** [ 933.841487] lowmemorykiller: Killing 'syz-executor.1' (10035) (tgid 10035), adj 1000, [ 933.841487] to free 52240kB on behalf of 'kworker/u4:1' (29453) because [ 933.841487] cache 12544kB is below limit 65536kB for oom_score_adj 12 [ 933.841487] Free memory is 51404kB above reserved [ 933.856365] lowmemorykiller: Killing 'syz-executor.3' (10037) (tgid 10037), adj 1000, [ 933.856365] to free 52252kB on behalf of 'kswapd0' (33) because [ 933.856365] cache 12544kB is below limit 16384kB for oom_score_adj 6 [ 933.856365] Free memory is -5852kB above reserved [ 933.857018] lowmemorykiller: Killing 'syz-executor.1' (9978) (tgid 9978), adj 1000, [ 933.857018] to free 52236kB on behalf of 'kworker/u4:1' (29453) because [ 933.857018] cache 12544kB is below limit 65536kB for oom_score_adj 12 [ 933.857018] Free memory is 55604kB above reserved [ 933.912966] input: syz1 as /devices/virtual/input/input4547 [ 934.133828] input: syz1 as /devices/virtual/input/input4548 18:00:51 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:51 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x0, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:51 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 934.154612] input: syz1 as /devices/virtual/input/input4549 [ 934.158197] input: syz1 as /devices/virtual/input/input4550 [ 934.309867] input: syz1 as /devices/virtual/input/input4551 18:00:52 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:52 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x0, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 6 printk messages dropped ** [ 934.897072] lowmemorykiller: Killing 'syz-executor.4' (10080) (tgid 10080), adj 1000, [ 934.897072] to free 52300kB on behalf of 'kswapd0' (33) because [ 934.897072] cache 12524kB is below limit 16384kB for oom_score_adj 6 [ 934.897072] Free memory is -6788kB above reserved [ 934.898711] lowmemorykiller: Killing 'syz-executor.5' (10097) (tgid 10097), adj 1000, [ 934.898711] to free 52272kB on behalf of 'kswapd0' (33) because 18:00:52 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x0, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:52 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 934.898711] cache 12524kB is below limit 16384kB for oom_score_adj 6 [ 934.898711] Free memory is 4540kB above reserved [ 934.900178] lowmemorykiller: Killing 'syz-executor.0' (10098) (tgid 10098), adj 1000, [ 934.900178] to free 52252kB on behalf of 'kswapd0' (33) because [ 934.900178] cache 12524kB is below limit 16384kB for oom_score_adj 6 [ 934.900178] Free memory is 4540kB above reserved [ 934.953518] lowmemorykiller: Killing 'syz-executor.3' (10121) (tgid 10121), adj 1000, [ 934.953518] to free 52252kB on behalf of 'kswapd0' (33) because [ 934.953518] cache 12524kB is below limit 16384kB for oom_score_adj 6 [ 934.953518] Free memory is 13040kB above reserved [ 934.955389] lowmemorykiller: Killing 'syz-executor.0' (10040) (tgid 10040), adj 1000, [ 934.955389] to free 52248kB on behalf of 'kswapd0' (33) because [ 934.955389] cache 12424kB is below limit 65536kB for oom_score_adj 12 [ 934.955389] Free memory is 44244kB above reserved [ 934.972152] input: syz1 as /devices/virtual/input/input4557 [ 934.986482] lowmemorykiller: Killing 'syz-executor.1' (10096) (tgid 10096), adj 1000, [ 934.986482] to free 52240kB on behalf of 'kswapd0' (33) because [ 934.986482] cache 12424kB is below limit 65536kB for oom_score_adj 12 [ 934.986482] Free memory is 44244kB above reserved [ 935.233105] input: syz1 as /devices/virtual/input/input4558 [ 935.268686] input: syz1 as /devices/virtual/input/input4559 [ 935.532468] input: syz1 as /devices/virtual/input/input4560 [ 935.612257] input: syz1 as /devices/virtual/input/input4561 [ 935.666728] input: syz1 as /devices/virtual/input/input4562 [ 935.670768] input: syz1 as /devices/virtual/input/input4563 18:00:52 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:52 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:52 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x0, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:52 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x0, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:52 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:53 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:53 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 1 printk messages dropped ** [ 935.716671] lowmemorykiller: Killing 'syz-executor.0' (10191) (tgid 10191), adj 1000, [ 935.716671] to free 52256kB on behalf of 'kswapd0' (33) because [ 935.716671] cache 12508kB is below limit 16384kB for oom_score_adj 6 [ 935.716671] Free memory is 5784kB above reserved 18:00:53 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x0, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:53 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 935.726948] lowmemorykiller: Killing 'syz-executor.1' (10145) (tgid 10145), adj 1000, [ 935.726948] to free 52248kB on behalf of 'kswapd0' (33) because [ 935.726948] cache 12508kB is below limit 65536kB for oom_score_adj 12 [ 935.726948] Free memory is 17208kB above reserved [ 935.756355] lowmemorykiller: Killing 'syz-executor.5' (10159) (tgid 10159), adj 1000, [ 935.756355] to free 52248kB on behalf of 'kswapd0' (33) because [ 935.756355] cache 12508kB is below limit 65536kB for oom_score_adj 12 [ 935.756355] Free memory is 27380kB above reserved [ 935.766383] lowmemorykiller: Killing 'syz-executor.3' (10175) (tgid 10175), adj 1000, [ 935.766383] to free 52248kB on behalf of 'kswapd0' (33) because [ 935.766383] cache 12508kB is below limit 65536kB for oom_score_adj 12 [ 935.766383] Free memory is 47272kB above reserved 18:00:53 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x0, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 935.768158] lowmemorykiller: Killing 'syz-executor.5' (10197) (tgid 10197), adj 1000, [ 935.768158] to free 52248kB on behalf of 'kswapd0' (33) because [ 935.768158] cache 12508kB is below limit 65536kB for oom_score_adj 12 [ 935.768158] Free memory is 58396kB above reserved 18:00:53 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:53 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 8 printk messages dropped ** [ 936.596587] lowmemorykiller: Killing 'syz-executor.5' (10234) (tgid 10234), adj 1000, [ 936.596587] to free 52248kB on behalf of 'kswapd0' (33) because [ 936.596587] cache 12508kB is below limit 16384kB for oom_score_adj 6 [ 936.596587] Free memory is -7540kB above reserved [ 936.598651] lowmemorykiller: Killing 'syz-executor.0' (10236) (tgid 10236), adj 1000, [ 936.598651] to free 52248kB on behalf of 'kswapd0' (33) because [ 936.598651] cache 12508kB is below limit 65536kB for oom_score_adj 12 [ 936.598651] Free memory is 17932kB above reserved [ 936.610451] lowmemorykiller: Killing 'syz-executor.1' (10213) (tgid 10213), adj 1000, [ 936.610451] to free 52244kB on behalf of 'kswapd0' (33) because [ 936.610451] cache 12508kB is below limit 65536kB for oom_score_adj 12 [ 936.610451] Free memory is 17684kB above reserved [ 936.626528] lowmemorykiller: Killing 'syz-executor.3' (27664) (tgid 27664), adj 1000, [ 936.626528] to free 51608kB on behalf of 'kswapd0' (33) because [ 936.626528] cache 12508kB is below limit 65536kB for oom_score_adj 12 [ 936.626528] Free memory is 27900kB above reserved [ 936.646522] lowmemorykiller: Killing 'syz-executor.3' (27834) (tgid 27834), adj 1000, [ 936.646522] to free 51608kB on behalf of 'kswapd0' (33) because [ 936.646522] cache 12508kB is below limit 65536kB for oom_score_adj 12 [ 936.646522] Free memory is 44404kB above reserved [ 936.666768] lowmemorykiller: Killing 'syz-executor.3' (27945) (tgid 27945), adj 1000, [ 936.666768] to free 51608kB on behalf of 'kswapd0' (33) because [ 936.666768] cache 12508kB is below limit 65536kB for oom_score_adj 12 [ 936.666768] Free memory is 57860kB above reserved [ 936.954040] input: syz1 as /devices/virtual/input/input4570 [ 936.978208] input: syz1 as /devices/virtual/input/input4571 [ 937.003292] input: syz1 as /devices/virtual/input/input4572 [ 937.028103] input: syz1 as /devices/virtual/input/input4573 [ 937.028535] input: syz1 as /devices/virtual/input/input4574 [ 937.448742] input: syz1 as /devices/virtual/input/input4575 [ 937.472683] input: syz1 as /devices/virtual/input/input4577 [ 937.480244] input: syz1 as /devices/virtual/input/input4576 [ 937.575997] lowmemorykiller: Killing 'syz-executor.3' (10269) (tgid 10269), adj 1000, [ 937.575997] to free 52252kB on behalf of 'kswapd0' (33) because [ 937.575997] cache 12576kB is below limit 16384kB for oom_score_adj 6 [ 937.575997] Free memory is -6792kB above reserved [ 937.596672] lowmemorykiller: Killing 'syz-executor.3' (10333) (tgid 10333), adj 1000, [ 937.596672] to free 52252kB on behalf of 'kswapd0' (33) because [ 937.596672] cache 12576kB is below limit 16384kB for oom_score_adj 6 [ 937.596672] Free memory is -6792kB above reserved 18:00:54 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:54 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:54 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x0, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:54 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:54 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 937.598484] lowmemorykiller: Killing 'syz-executor.0' (10277) (tgid 10277), adj 1000, [ 937.598484] to free 52248kB on behalf of 'kswapd0' (33) because [ 937.598484] cache 12576kB is below limit 65536kB for oom_score_adj 12 [ 937.598484] Free memory is 18916kB above reserved [ 937.614911] lowmemorykiller: Killing 'syz-executor.0' (10314) (tgid 10314), adj 1000, [ 937.614911] to free 52248kB on behalf of 'kswapd0' (33) because [ 937.614911] cache 12576kB is below limit 65536kB for oom_score_adj 12 [ 937.614911] Free memory is 18792kB above reserved 18:00:54 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 937.616764] lowmemorykiller: Killing 'syz-executor.5' (10326) (tgid 10326), adj 1000, [ 937.616764] to free 52248kB on behalf of 'kswapd0' (33) because [ 937.616764] cache 12576kB is below limit 65536kB for oom_score_adj 12 [ 937.616764] Free memory is 44720kB above reserved [ 937.618266] lowmemorykiller: Killing 'syz-executor.1' (10291) (tgid 10291), adj 1000, 18:00:54 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x0, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:54 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 937.618266] to free 52240kB on behalf of 'kswapd0' (33) because [ 937.618266] cache 12576kB is below limit 65536kB for oom_score_adj 12 [ 937.618266] Free memory is 44720kB above reserved [ 937.650499] input: syz1 as /devices/virtual/input/input4578 [ 937.691716] lowmemorykiller: Killing 'syz-executor.1' (10317) (tgid 10317), adj 1000, [ 937.691716] to free 52240kB on behalf of 'kswapd0' (33) because [ 937.691716] cache 12576kB is below limit 65536kB for oom_score_adj 12 [ 937.691716] Free memory is 58208kB above reserved 18:00:54 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 937.712159] input: syz1 as /devices/virtual/input/input4579 [ 937.933109] input: syz1 as /devices/virtual/input/input4580 18:00:55 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 938.132280] input: syz1 as /devices/virtual/input/input4581 [ 938.240988] input: syz1 as /devices/virtual/input/input4582 [ 938.277007] input: syz1 as /devices/virtual/input/input4583 18:00:55 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:55 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 938.323482] input: syz1 as /devices/virtual/input/input4584 [ 938.360217] lowmemorykiller: Killing 'syz-executor.0' (10375) (tgid 10375), adj 1000, [ 938.360217] to free 52256kB on behalf of 'kswapd0' (33) because [ 938.360217] cache 12576kB is below limit 16384kB for oom_score_adj 6 [ 938.360217] Free memory is -6684kB above reserved [ 938.397300] lowmemorykiller: Killing 'syz-executor.5' (10388) (tgid 10388), adj 1000, [ 938.397300] to free 52248kB on behalf of 'kswapd0' (33) because [ 938.397300] cache 12576kB is below limit 16384kB for oom_score_adj 6 [ 938.397300] Free memory is -7304kB above reserved [ 938.399532] lowmemorykiller: Killing 'syz-executor.1' (10363) (tgid 10363), adj 1000, [ 938.399532] to free 52240kB on behalf of 'kswapd0' (33) because [ 938.399532] cache 12576kB is below limit 65536kB for oom_score_adj 12 18:00:55 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 938.399532] Free memory is 18176kB above reserved [ 938.426766] lowmemorykiller: Killing 'syz-executor.3' (10368) (tgid 10368), adj 1000, [ 938.426766] to free 52240kB on behalf of 'kswapd0' (33) because [ 938.426766] cache 12576kB is below limit 65536kB for oom_score_adj 12 [ 938.426766] Free memory is 17804kB above reserved [ 938.456778] lowmemorykiller: Killing 'syz-executor.5' (10268) (tgid 10268), adj 1000, [ 938.456778] to free 52236kB on behalf of 'kswapd0' (33) because [ 938.456778] cache 12576kB is below limit 65536kB for oom_score_adj 12 [ 938.456778] Free memory is 46072kB above reserved [ 938.463645] lowmemorykiller: Killing 'syz-executor.2' (10240) (tgid 10240), adj 1000, [ 938.463645] to free 51800kB on behalf of 'kswapd0' (33) because [ 938.463645] cache 12576kB is below limit 65536kB for oom_score_adj 12 [ 938.463645] Free memory is 57896kB above reserved [ 938.487863] lowmemorykiller: Killing 'syz-executor.3' (28018) (tgid 28018), adj 1000, [ 938.487863] to free 51608kB on behalf of 'kswapd0' (33) because [ 938.487863] cache 12576kB is below limit 65536kB for oom_score_adj 12 [ 938.487863] Free memory is 60936kB above reserved 18:00:55 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:55 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:55 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:56 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:56 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:56 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x0, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:56 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:56 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:56 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:56 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:56 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x0, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 2 printk messages dropped ** [ 938.577497] lowmemorykiller: Killing 'syz-executor.3' (28149) (tgid 28149), adj 1000, [ 938.577497] to free 51608kB on behalf of 'syz-executor.2' (10413) because [ 938.577497] cache 12576kB is below limit 65536kB for oom_score_adj 12 [ 938.577497] Free memory is 61616kB above reserved 18:00:56 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:57 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:57 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:57 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 12 printk messages dropped ** [ 939.516754] lowmemorykiller: Killing 'syz-executor.0' (10423) (tgid 10423), adj 1000, [ 939.516754] to free 52248kB on behalf of 'kswapd0' (33) because [ 939.516754] cache 12436kB is below limit 16384kB for oom_score_adj 6 [ 939.516754] Free memory is 9020kB above reserved [ 939.519360] lowmemorykiller: Killing 'syz-executor.5' (10430) (tgid 10430), adj 1000, [ 939.519360] to free 52248kB on behalf of 'kswapd0' (33) because 18:00:57 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 939.519360] cache 12436kB is below limit 16384kB for oom_score_adj 6 [ 939.519360] Free memory is 15824kB above reserved [ 939.535932] lowmemorykiller: Killing 'syz-executor.5' (10467) (tgid 10467), adj 1000, [ 939.535932] to free 52248kB on behalf of 'kswapd0' (33) because 18:00:57 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x0, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 939.535932] cache 12436kB is below limit 16384kB for oom_score_adj 6 [ 939.535932] Free memory is 15364kB above reserved [ 939.566733] lowmemorykiller: Killing 'syz-executor.0' (10480) (tgid 10480), adj 1000, [ 939.566733] to free 52248kB on behalf of 'kswapd0' (33) because [ 939.566733] cache 12436kB is below limit 65536kB for oom_score_adj 12 [ 939.566733] Free memory is 34760kB above reserved [ 939.885668] input: syz1 as /devices/virtual/input/input4595 [ 939.890781] input: syz1 as /devices/virtual/input/input4596 [ 939.947304] input: syz1 as /devices/virtual/input/input4597 [ 940.035571] input: syz1 as /devices/virtual/input/input4598 [ 940.063278] input: syz1 as /devices/virtual/input/input4599 [ 940.208388] lowmemorykiller: Killing 'syz-executor.4' (10464) (tgid 10464), adj 1000, [ 940.208388] to free 52300kB on behalf of 'kswapd0' (33) because [ 940.208388] cache 13424kB is below limit 16384kB for oom_score_adj 6 [ 940.208388] Free memory is -6820kB above reserved 18:00:57 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x0, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:57 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:57 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 1 printk messages dropped ** [ 940.226583] lowmemorykiller: Killing 'syz-executor.5' (10507) (tgid 10507), adj 1000, [ 940.226583] to free 52248kB on behalf of 'kswapd0' (33) because [ 940.226583] cache 13424kB is below limit 16384kB for oom_score_adj 6 [ 940.226583] Free memory is 1632kB above reserved [ 940.231340] lowmemorykiller: Killing 'syz-executor.0' (10521) (tgid 10521), adj 1000, [ 940.231340] to free 52248kB on behalf of 'kswapd0' (33) because [ 940.231340] cache 13424kB is below limit 16384kB for oom_score_adj 6 [ 940.231340] Free memory is 11868kB above reserved [ 940.251809] lowmemorykiller: Killing 'syz-executor.1' (10409) (tgid 10409), adj 1000, [ 940.251809] to free 52240kB on behalf of 'kswapd0' (33) because [ 940.251809] cache 13424kB is below limit 16384kB for oom_score_adj 6 [ 940.251809] Free memory is 11100kB above reserved 18:00:58 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 940.278705] lowmemorykiller: Killing 'syz-executor.1' (10504) (tgid 10504), adj 1000, [ 940.278705] to free 52240kB on behalf of 'kswapd0' (33) because [ 940.278705] cache 13424kB is below limit 65536kB for oom_score_adj 12 [ 940.278705] Free memory is 32792kB above reserved 18:00:58 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 940.281353] lowmemorykiller: Killing 'syz-executor.1' (10475) (tgid 10475), adj 1000, [ 940.281353] to free 52228kB on behalf of 'kswapd0' (33) because [ 940.281353] cache 13424kB is below limit 65536kB for oom_score_adj 12 [ 940.281353] Free memory is 64964kB above reserved [ 940.297192] lowmemorykiller: Killing 'syz-executor.3' (28295) (tgid 28295), adj 1000, [ 940.297192] to free 51608kB on behalf of 'kswapd0' (33) because [ 940.297192] cache 13424kB is below limit 65536kB for oom_score_adj 12 [ 940.297192] Free memory is 64964kB above reserved [ 940.433018] input: syz1 as /devices/virtual/input/input4600 [ 940.523409] input: syz1 as /devices/virtual/input/input4601 18:00:58 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:58 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x0, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:58 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:58 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:58 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 1 printk messages dropped ** [ 940.560717] input: syz1 as /devices/virtual/input/input4603 [ 940.604753] input: syz1 as /devices/virtual/input/input4604 18:00:58 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:58 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 940.852247] input: syz1 as /devices/virtual/input/input4605 18:00:59 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, 0xffffffffffffffff) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 940.938886] input: syz1 as /devices/virtual/input/input4606 [ 941.155894] input: syz1 as /devices/virtual/input/input4607 [ 941.166993] input: syz1 as /devices/virtual/input/input4608 18:00:59 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x0, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 941.255799] lowmemorykiller: Killing 'syz-executor.5' (10548) (tgid 10548), adj 1000, [ 941.255799] to free 52272kB on behalf of 'kswapd0' (33) because [ 941.255799] cache 12880kB is below limit 16384kB for oom_score_adj 6 [ 941.255799] Free memory is -6852kB above reserved 18:00:59 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:59 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:59 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x0, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 4 printk messages dropped ** [ 941.329199] lowmemorykiller: Killing 'syz-executor.5' (10610) (tgid 10610), adj 1000, [ 941.329199] to free 52248kB on behalf of 'kswapd0' (33) because [ 941.329199] cache 12880kB is below limit 65536kB for oom_score_adj 12 [ 941.329199] Free memory is 47564kB above reserved 18:00:59 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:59 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:59 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:59 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x0, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:00:59 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 13 printk messages dropped ** [ 942.155656] lowmemorykiller: Killing 'syz-executor.0' (10694) (tgid 10694), adj 1000, [ 942.155656] to free 52240kB on behalf of 'kswapd0' (33) because [ 942.155656] cache 13508kB is below limit 65536kB for oom_score_adj 12 [ 942.155656] Free memory is 61604kB above reserved 18:01:00 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:00 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x0, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 1 printk messages dropped ** [ 942.500905] input: syz1 as /devices/virtual/input/input4617 18:01:00 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:00 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:00 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 942.565745] input: syz1 as /devices/virtual/input/input4618 18:01:00 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:00 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 4 printk messages dropped ** [ 942.791761] lowmemorykiller: Killing 'syz-executor.0' (10766) (tgid 10766), adj 1000, [ 942.791761] to free 52248kB on behalf of 'kswapd0' (33) because [ 942.791761] cache 13008kB is below limit 65536kB for oom_score_adj 12 [ 942.791761] Free memory is 46844kB above reserved [ 942.793504] lowmemorykiller: Killing 'syz-executor.1' (10744) (tgid 10744), adj 1000, [ 942.793504] to free 52240kB on behalf of 'kswapd0' (33) because 18:01:00 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 942.793504] cache 12908kB is below limit 65536kB for oom_score_adj 12 [ 942.793504] Free memory is 62200kB above reserved [ 942.824650] lowmemorykiller: Killing 'syz-executor.1' (10640) (tgid 10640), adj 1000, [ 942.824650] to free 52236kB on behalf of 'kswapd0' (33) because 18:01:00 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 942.824650] cache 12908kB is below limit 65536kB for oom_score_adj 12 [ 942.824650] Free memory is 62200kB above reserved [ 942.893617] input: syz1 as /devices/virtual/input/input4619 18:01:00 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 942.993076] input: syz1 as /devices/virtual/input/input4621 [ 943.031500] input: syz1 as /devices/virtual/input/input4622 [ 943.152815] input: syz1 as /devices/virtual/input/input4623 [ 943.230788] input: syz1 as /devices/virtual/input/input4625 18:01:01 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:01 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:01 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:01 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 6 printk messages dropped ** [ 943.639788] lowmemorykiller: Killing 'syz-executor.3' (10823) (tgid 10823), adj 1000, [ 943.639788] to free 52252kB on behalf of 'kswapd0' (33) because [ 943.639788] cache 12896kB is below limit 16384kB for oom_score_adj 6 [ 943.639788] Free memory is 12272kB above reserved 18:01:01 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:01 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:01 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:01 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 12 printk messages dropped ** [ 944.526403] lowmemorykiller: Killing 'syz-executor.5' (10852) (tgid 10852), adj 1000, [ 944.526403] to free 52248kB on behalf of 'kswapd0' (33) because [ 944.526403] cache 12944kB is below limit 16384kB for oom_score_adj 6 [ 944.526403] Free memory is -1424kB above reserved [ 944.536376] lowmemorykiller: Killing 'syz-executor.0' (10884) (tgid 10884), adj 1000, 18:01:01 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x0, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 944.536376] to free 52240kB on behalf of 'kswapd0' (33) because [ 944.536376] cache 12944kB is below limit 65536kB for oom_score_adj 12 [ 944.536376] Free memory is 26276kB above reserved [ 944.546418] lowmemorykiller: Killing 'syz-executor.5' (10895) (tgid 10895), adj 1000, [ 944.546418] to free 52236kB on behalf of 'kswapd0' (33) because [ 944.546418] cache 12944kB is below limit 65536kB for oom_score_adj 12 [ 944.546418] Free memory is 43152kB above reserved 18:01:02 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 944.547999] lowmemorykiller: Killing 'syz-executor.1' (10692) (tgid 10692), adj 1000, [ 944.547999] to free 52228kB on behalf of 'kswapd0' (33) because [ 944.547999] cache 12896kB is below limit 65536kB for oom_score_adj 12 [ 944.547999] Free memory is 58152kB above reserved [ 944.650921] input: syz1 as /devices/virtual/input/input4635 [ 944.716587] input: syz1 as /devices/virtual/input/input4636 [ 944.787026] lowmemorykiller: Killing 'syz-executor.0' (10918) (tgid 10918), adj 1000, [ 944.787026] to free 52248kB on behalf of 'syz-executor.4' (10912) because [ 944.787026] cache 12944kB is below limit 16384kB for oom_score_adj 6 [ 944.787026] Free memory is -5976kB above reserved [ 944.966709] input: syz1 as /devices/virtual/input/input4638 [ 945.038391] input: syz1 as /devices/virtual/input/input4639 [ 945.115528] input: syz1 as /devices/virtual/input/input4640 [ 945.472477] lowmemorykiller: Killing 'syz-executor.5' (10938) (tgid 10938), adj 1000, [ 945.472477] to free 52248kB on behalf of 'kswapd0' (33) because [ 945.472477] cache 14500kB is below limit 16384kB for oom_score_adj 6 [ 945.472477] Free memory is -5764kB above reserved [ 945.486643] lowmemorykiller: Killing 'syz-executor.0' (10959) (tgid 10959), adj 1000, [ 945.486643] to free 52248kB on behalf of 'udevd' (591) because [ 945.486643] cache 14500kB is below limit 16384kB for oom_score_adj 6 [ 945.486643] Free memory is -1864kB above reserved [ 945.487722] lowmemorykiller: Killing 'syz-executor.3' (10936) (tgid 10936), adj 1000, [ 945.487722] to free 52252kB on behalf of 'udevd' (590) because [ 945.487722] cache 14500kB is below limit 16384kB for oom_score_adj 6 18:01:02 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 945.487722] Free memory is -5764kB above reserved [ 945.489373] lowmemorykiller: Killing 'syz-executor.1' (10929) (tgid 10929), adj 1000, [ 945.489373] to free 52240kB on behalf of 'udevd' (591) because [ 945.489373] cache 14944kB is below limit 16384kB for oom_score_adj 6 [ 945.489373] Free memory is 12160kB above reserved [ 945.499259] lowmemorykiller: Killing 'syz-executor.3' (10981) (tgid 10981), adj 1000, 18:01:02 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 945.499259] to free 52240kB on behalf of 'udevd' (590) because [ 945.499259] cache 14944kB is below limit 65536kB for oom_score_adj 12 [ 945.499259] Free memory is 22760kB above reserved [ 945.510703] lowmemorykiller: Killing 'syz-executor.3' (28362) (tgid 28362), adj 1000, [ 945.510703] to free 51608kB on behalf of 'udevd' (590) because [ 945.510703] cache 14944kB is below limit 65536kB for oom_score_adj 12 [ 945.510703] Free memory is 28188kB above reserved [ 945.511249] lowmemorykiller: Killing 'syz-executor.1' (10987) (tgid 10987), adj 1000, [ 945.511249] to free 52240kB on behalf of 'udevd' (591) because [ 945.511249] cache 14944kB is below limit 65536kB for oom_score_adj 12 [ 945.511249] Free memory is 25160kB above reserved [ 945.516910] lowmemorykiller: Killing 'syz-executor.3' (28439) (tgid 28439), adj 1000, [ 945.516910] to free 51608kB on behalf of 'udevd' (590) because [ 945.516910] cache 14888kB is below limit 65536kB for oom_score_adj 12 [ 945.516910] Free memory is 60336kB above reserved [ 945.517368] lowmemorykiller: Killing 'syz-executor.3' (28439) (tgid 28439), adj 1000, [ 945.517368] to free 51608kB on behalf of 'udevd' (591) because [ 945.517368] cache 14888kB is below limit 65536kB for oom_score_adj 12 [ 945.517368] Free memory is 60336kB above reserved [ 945.536391] lowmemorykiller: Killing 'syz-executor.5' (10972) (tgid 10972), adj 1000, [ 945.536391] to free 52248kB on behalf of 'kswapd0' (33) because [ 945.536391] cache 14500kB is below limit 16384kB for oom_score_adj 6 [ 945.536391] Free memory is -1964kB above reserved 18:01:02 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:02 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 946.286519] input: syz1 as /devices/virtual/input/input4642 [ 946.389612] input: syz1 as /devices/virtual/input/input4643 [ 946.401165] input: syz1 as /devices/virtual/input/input4644 [ 946.725011] input: syz1 as /devices/virtual/input/input4646 [ 946.767139] input: syz1 as /devices/virtual/input/input4647 [ 946.855019] input: syz1 as /devices/virtual/input/input4649 [ 946.924521] input: syz1 as /devices/virtual/input/input4650 [ 946.965322] input: syz1 as /devices/virtual/input/input4651 18:01:03 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 947.360217] input: syz1 as /devices/virtual/input/input4653 18:01:03 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:03 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:03 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:03 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:03 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 947.377832] lowmemorykiller: Killing 'syz-executor.0' (10999) (tgid 10999), adj 1000, [ 947.377832] to free 52264kB on behalf of 'kswapd0' (33) because [ 947.377832] cache 19216kB is below limit 65536kB for oom_score_adj 12 [ 947.377832] Free memory is -4256kB above reserved 18:01:03 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:03 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:03 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:03 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 947.379254] lowmemorykiller: Killing 'syz-executor.0' (11056) (tgid 11056), adj 1000, [ 947.379254] to free 52256kB on behalf of 'kswapd0' (33) because [ 947.379254] cache 19216kB is below limit 65536kB for oom_score_adj 12 [ 947.379254] Free memory is -4256kB above reserved 18:01:04 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:04 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 947.396381] lowmemorykiller: Killing 'syz-executor.5' (11012) (tgid 11012), adj 1000, [ 947.396381] to free 52272kB on behalf of 'udevd' (591) because [ 947.396381] cache 19216kB is below limit 65536kB for oom_score_adj 12 [ 947.396381] Free memory is -5356kB above reserved [ 947.396449] lowmemorykiller: Killing 'syz-executor.3' (11073) (tgid 11073), adj 1000, [ 947.396449] to free 52252kB on behalf of 'syz-executor.5' (2070) because [ 947.396449] cache 19216kB is below limit 65536kB for oom_score_adj 12 18:01:04 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 947.396449] Free memory is -5356kB above reserved 18:01:04 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 947.406819] lowmemorykiller: Killing 'syz-executor.5' (11087) (tgid 11087), adj 1000, [ 947.406819] to free 52248kB on behalf of 'syz-executor.5' (2070) because [ 947.406819] cache 19216kB is below limit 65536kB for oom_score_adj 12 [ 947.406819] Free memory is 33036kB above reserved [ 947.408312] lowmemorykiller: Killing 'syz-executor.0' (11031) (tgid 11031), adj 1000, [ 947.408312] to free 52240kB on behalf of 'udevd' (591) because [ 947.408312] cache 19216kB is below limit 65536kB for oom_score_adj 12 [ 947.408312] Free memory is 59136kB above reserved [ 947.416364] lowmemorykiller: Killing 'syz-executor.1' (11093) (tgid 11093), adj 1000, [ 947.416364] to free 52240kB on behalf of 'udevd' (591) because [ 947.416364] cache 19216kB is below limit 65536kB for oom_score_adj 12 18:01:04 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 947.416364] Free memory is 59136kB above reserved 18:01:04 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:04 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:04 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:04 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:05 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:05 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:05 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 2 printk messages dropped ** [ 947.531728] input: syz1 as /devices/virtual/input/input4654 18:01:05 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:05 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:05 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:05 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}], 0x1) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 947.649048] input: syz1 as /devices/virtual/input/input4655 [ 947.687961] input: syz1 as /devices/virtual/input/input4656 [ 947.878601] input: syz1 as /devices/virtual/input/input4657 [ 947.994876] input: syz1 as /devices/virtual/input/input4659 [ 948.043597] input: syz1 as /devices/virtual/input/input4658 [ 948.179737] input: syz1 as /devices/virtual/input/input4660 [ 948.236159] input: syz1 as /devices/virtual/input/input4661 [ 948.327950] input: syz1 as /devices/virtual/input/input4663 18:01:05 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 5 printk messages dropped ** [ 948.508848] lowmemorykiller: Killing 'syz-executor.3' (11166) (tgid 11166), adj 1000, [ 948.508848] to free 52252kB on behalf of 'kswapd0' (33) because [ 948.508848] cache 18936kB is below limit 65536kB for oom_score_adj 12 [ 948.508848] Free memory is 19688kB above reserved [ 948.516601] lowmemorykiller: Killing 'syz-executor.0' (11140) (tgid 11140), adj 1000, [ 948.516601] to free 52248kB on behalf of 'kswapd0' (33) because [ 948.516601] cache 18936kB is below limit 65536kB for oom_score_adj 12 [ 948.516601] Free memory is 47712kB above reserved [ 948.518687] lowmemorykiller: Killing 'syz-executor.1' (11111) (tgid 11111), adj 1000, [ 948.518687] to free 52240kB on behalf of 'kswapd0' (33) because [ 948.518687] cache 18936kB is below limit 65536kB for oom_score_adj 12 [ 948.518687] Free memory is 55768kB above reserved [ 948.520755] lowmemorykiller: Killing 'syz-executor.1' (11151) (tgid 11151), adj 1000, [ 948.520755] to free 52240kB on behalf of 'kswapd0' (33) because [ 948.520755] cache 18936kB is below limit 65536kB for oom_score_adj 12 [ 948.520755] Free memory is 56868kB above reserved [ 948.522389] lowmemorykiller: Killing 'syz-executor.3' (28512) (tgid 28512), adj 1000, [ 948.522389] to free 51608kB on behalf of 'kswapd0' (33) because 18:01:05 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:05 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}], 0x1) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 948.522389] cache 18936kB is below limit 65536kB for oom_score_adj 12 [ 948.522389] Free memory is 57668kB above reserved [ 948.546256] lowmemorykiller: Killing 'syz-executor.3' (28565) (tgid 28565), adj 1000, [ 948.546256] to free 51608kB on behalf of 'kswapd0' (33) because [ 948.546256] cache 18936kB is below limit 65536kB for oom_score_adj 12 [ 948.546256] Free memory is 58468kB above reserved 18:01:06 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 948.765599] lowmemorykiller: Killing 'syz-executor.3' (28645) (tgid 28645), adj 1000, [ 948.765599] to free 51608kB on behalf of 'syz-executor.2' (11163) because [ 948.765599] cache 18944kB is below limit 65536kB for oom_score_adj 12 [ 948.765599] Free memory is -6756kB above reserved [ 948.941738] input: syz1 as /devices/virtual/input/input4665 [ 949.070035] input: syz1 as /devices/virtual/input/input4666 [ 949.241984] input: syz1 as /devices/virtual/input/input4667 [ 949.251687] input: syz1 as /devices/virtual/input/input4668 [ 949.444472] input: syz1 as /devices/virtual/input/input4669 [ 949.491645] input: syz1 as /devices/virtual/input/input4670 18:01:06 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:06 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}], 0x1) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 949.515944] input: syz1 as /devices/virtual/input/input4671 [ 949.757536] input: syz1 as /devices/virtual/input/input4672 18:01:06 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 949.853977] input: syz1 as /devices/virtual/input/input4673 [ 949.894367] lowmemorykiller: Killing 'syz-executor.3' (11272) (tgid 11272), adj 1000, [ 949.894367] to free 52316kB on behalf of 'kswapd0' (33) because [ 949.894367] cache 19020kB is below limit 65536kB for oom_score_adj 12 [ 949.894367] Free memory is -6680kB above reserved [ 949.895952] lowmemorykiller: Killing 'syz-executor.4' (11162) (tgid 11162), adj 1000, [ 949.895952] to free 52308kB on behalf of 'kswapd0' (33) because [ 949.895952] cache 19168kB is below limit 65536kB for oom_score_adj 12 [ 949.895952] Free memory is -6680kB above reserved [ 949.906514] lowmemorykiller: Killing 'syz-executor.1' (11211) (tgid 11211), adj 1000, 18:01:06 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:06 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 949.906514] to free 52268kB on behalf of 'kswapd0' (33) because [ 949.906514] cache 19168kB is below limit 65536kB for oom_score_adj 12 [ 949.906514] Free memory is -6680kB above reserved 18:01:06 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 949.909861] lowmemorykiller: Killing 'syz-executor.0' (11231) (tgid 11231), adj 1000, [ 949.909861] to free 52264kB on behalf of 'kswapd0' (33) because [ 949.909861] cache 19216kB is below limit 65536kB for oom_score_adj 12 [ 949.909861] Free memory is 15936kB above reserved 18:01:06 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:06 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:07 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:07 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:07 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:07 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 1 printk messages dropped ** [ 949.946418] lowmemorykiller: Killing 'syz-executor.0' (11179) (tgid 11179), adj 1000, [ 949.946418] to free 52256kB on behalf of 'kswapd0' (33) because [ 949.946418] cache 19216kB is below limit 65536kB for oom_score_adj 12 [ 949.946418] Free memory is 28212kB above reserved [ 949.954684] lowmemorykiller: Killing 'syz-executor.5' (11189) (tgid 11189), adj 1000, [ 949.954684] to free 52248kB on behalf of 'kswapd0' (33) because 18:01:07 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 949.954684] cache 19116kB is below limit 65536kB for oom_score_adj 12 [ 949.954684] Free memory is 53712kB above reserved [ 949.965872] lowmemorykiller: Killing 'syz-executor.5' (11256) (tgid 11256), adj 1000, [ 949.965872] to free 52248kB on behalf of 'kswapd0' (33) because [ 949.965872] cache 19116kB is below limit 65536kB for oom_score_adj 12 [ 949.965872] Free memory is 59556kB above reserved [ 949.989584] input: syz1 as /devices/virtual/input/input4674 [ 950.313772] input: syz1 as /devices/virtual/input/input4675 [ 950.373641] input: syz1 as /devices/virtual/input/input4677 [ 950.381868] input: syz1 as /devices/virtual/input/input4676 [ 950.605050] input: syz1 as /devices/virtual/input/input4678 [ 950.820761] lowmemorykiller: Killing 'syz-executor.5' (11349) (tgid 11349), adj 1000, 18:01:07 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 950.820761] to free 52276kB on behalf of 'kswapd0' (33) because [ 950.820761] cache 19156kB is below limit 65536kB for oom_score_adj 12 [ 950.820761] Free memory is -6744kB above reserved [ 950.836961] lowmemorykiller: Killing 'syz-executor.5' (11300) (tgid 11300), adj 1000, [ 950.836961] to free 52272kB on behalf of 'kswapd0' (33) because [ 950.836961] cache 19156kB is below limit 65536kB for oom_score_adj 12 [ 950.836961] Free memory is -6744kB above reserved 18:01:07 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 950.838777] lowmemorykiller: Killing 'syz-executor.3' (11312) (tgid 11312), adj 1000, [ 950.838777] to free 52252kB on behalf of 'kswapd0' (33) because [ 950.838777] cache 19156kB is below limit 65536kB for oom_score_adj 12 [ 950.838777] Free memory is 25856kB above reserved 18:01:08 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 2 printk messages dropped ** [ 950.859519] lowmemorykiller: Killing 'syz-executor.2' (11343) (tgid 11343), adj 1000, [ 950.859519] to free 52296kB on behalf of 'kswapd0' (33) because [ 950.859519] cache 19156kB is below limit 65536kB for oom_score_adj 12 [ 950.859519] Free memory is 59368kB above reserved 18:01:08 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:08 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:08 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:08 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:08 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 950.944634] input: syz1 as /devices/virtual/input/input4679 [ 950.952187] input: syz1 as /devices/virtual/input/input4680 [ 950.967161] input: syz1 as /devices/virtual/input/input4681 [ 951.223739] input: syz1 as /devices/virtual/input/input4682 18:01:08 executing program 2: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) ** 8 printk messages dropped ** [ 951.557435] lowmemorykiller: Killing 'syz-executor.1' (11234) (tgid 11234), adj 1000, [ 951.557435] to free 52236kB on behalf of 'syz-executor.4' (30997) because [ 951.557435] cache 18656kB is below limit 65536kB for oom_score_adj 12 [ 951.557435] Free memory is 21712kB above reserved [ 951.572945] input: syz1 as /devices/virtual/input/input4684 18:01:08 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r11, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r12, r13, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 951.691097] input: syz1 as /devices/virtual/input/input4686 [ 951.691384] input: syz1 as /devices/virtual/input/input4687 [ 951.995990] input: syz1 as /devices/virtual/input/input4689 [ 952.268534] input: syz1 as /devices/virtual/input/input4690 [ 952.278767] input: syz1 as /devices/virtual/input/input4692 [ 952.291795] input: syz1 as /devices/virtual/input/input4693 [ 952.384286] lowmemorykiller: Killing 'syz-executor.2' (11419) (tgid 11419), adj 1000, 18:01:08 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:08 executing program 1: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 952.384286] to free 52296kB on behalf of 'kswapd0' (33) because [ 952.384286] cache 18924kB is below limit 65536kB for oom_score_adj 12 [ 952.384286] Free memory is -6756kB above reserved 18:01:08 executing program 3: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r12 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r12, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2, 0x6}, 0x100010014, r13, r14, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r14, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 952.392146] lowmemorykiller: Killing 'syz-executor.0' (11397) (tgid 11397), adj 1000, [ 952.392146] to free 52260kB on behalf of 'syz-executor.0' (11491) because [ 952.392146] cache 18924kB is below limit 65536kB for oom_score_adj 12 [ 952.392146] Free memory is -7500kB above reserved 18:01:09 executing program 0: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r12, 0x29, 0x2, 0x0, 0x0) fstat(r3, &(0x7f0000000b00)) r13 = eventfd2(0x0, 0x0) fcntl$getownex(r13, 0x10, &(0x7f0000000100)) fcntl$getown(r13, 0x9) readv(r13, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x40, {0x0, 0x2, 0x6}, 0x100010014, r14, r15, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, r11, r15, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:09 executing program 4: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(r8, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r11 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x0, {0x0, 0x2}, 0x100010014, r12, r13, 0x442, 0x10000, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r13, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x100000000000000, 0x3, 0x0, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000900)=""/155, 0x9b}, {0x0}], 0x2) read(r9, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) 18:01:09 executing program 5: r0 = eventfd2(0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r0, 0x9) r2 = getpgid(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/unix\x00') readv(r3, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0xff99}], 0x1) readv(r0, &(0x7f0000000580), 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x80000, 0x6) syncfs(r4) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x21, 0xffffffed) setsockopt$sock_int(r4, 0x1, 0x0, &(0x7f0000000180)=0x7f, 0x4) openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x80000, 0x0) clone(0x20207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x1, 0x3ab5dbc09061e450, 0xc) r5 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x5, 0x105082) r7 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x0) pwritev(r7, &(0x7f0000000440)=[{&(0x7f00000004c0)="03006f", 0x3}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbc\x00\x00\x00\x00\xdd\xff\xff\xff\x00', {0x0, 0x8000, 0x0, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7, 0x8000000, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)=ANY=[@ANYBLOB="a6e536e5073594a5acb838a0c7a1d2d1c25bd6138f82dac2bfdad652bdd476abdc981cbb95140e585c0cb57bb0cbdbb4f358089d1f20040000008a32d9ddb5fcc1e3d579b99a96d9dc292b7a067614736824e834baf48bfc0000456f3fc79506b799f01b7dc7cc0f711609bfc99fda07cb8e2ade621d02fd1233490f265c3836ca2c7193dd5d42e9f494664390d4d948cbcc9e5ac2ab922c20a828d82f5311e4620476b42d12d467b597e6b986ea26a1b60a81f46f556f8c1e000000000000000000000000000000008bf91cd28ee4b470b8dcbd2a16292c945fc74bc5eeadb5ceb3a7e94e73"], 0xe6) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0x526987c9) lstat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fstat(r3, 0x0) r10 = eventfd2(0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(r10, 0x9) readv(0xffffffffffffffff, &(0x7f0000000580), 0x0) lstat(&(0x7f0000000040)='./bus\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r10, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x0, {0x40, {0x0, 0x2, 0x6}, 0x0, r11, r12, 0x442, 0x0, 0x100000000, 0x9, 0x8000000000000001, 0x6, 0x0, 0x0, 0x3, 0x1f, 0x4}}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000001800)={0xa0, 0x19, 0x1, {0x2d82, {0x0, 0x2, 0x6}, 0x100010010, 0x0, r12, 0x442, 0xffff, 0xffffffffffffffff, 0x0, 0x7ffffffffffffffd, 0x6, 0x0, 0x100000000000000, 0x3, 0x1f, 0x7fffffff, 0x40000000000, 0x80, 0x20000000000008, 0x3}}, 0xa0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000640)={@loopback, @multicast2}, 0x0) read(0xffffffffffffffff, &(0x7f0000000700)=""/250, 0xffffffc9) sendfile(r6, r7, 0x0, 0x180003) [ 952.393608] lowmemorykiller: Killing 'syz-executor.1' (11480) (tgid 11480), adj 1000, [ 952.393608] to free 52260kB on behalf of 'syz-executor.0' (11491) because [ 952.393608] cache 18924kB is below limit 65536kB for oom_score_adj 12 [ 952.393608] Free memory is -6200kB above reserved ** 81 printk messages dropped ** [ 957.116609] lowmemorykiller: Killing 'syz-executor.3' (11770) (tgid 11770), adj 1000, [ 957.116609] to free 52248kB on behalf of 'kswapd0' (33) because [ 957.116609] cache 18724kB is below limit 65536kB for oom_score_adj 12 [ 957.116609] Free memory is 32588kB above reserved [ 957.126727] lowmemorykiller: Killing 'syz-executor.0' (11798) (tgid 11798), adj 1000, [ 957.126727] to free 52248kB on behalf of 'kswapd0' (33) because [ 957.126727] cache 18624kB is below limit 65536kB for oom_score_adj 12 [ 957.126727] Free memory is 59644kB above reserved [ 957.453533] input: syz1 as /devices/virtual/input/input4734 [ 957.457149] input: syz1 as /devices/virtual/input/input4735 [ 957.526983] input: syz1 as /devices/virtual/input/input4736 [ 957.579129] input: syz1 as /devices/virtual/input/input4737 [ 957.866210] lowmemorykiller: Killing 'syz-executor.3' (11886) (tgid 11886), adj 1000, [ 957.866210] to free 52276kB on behalf of 'kswapd0' (33) because [ 957.866210] cache 18860kB is below limit 65536kB for oom_score_adj 12 [ 957.866210] Free memory is -6740kB above reserved [ 957.887902] lowmemorykiller: Killing 'syz-executor.1' (11866) (tgid 11866), adj 1000, [ 957.887902] to free 52260kB on behalf of 'kswapd0' (33) because [ 957.887902] cache 18860kB is below limit 65536kB for oom_score_adj 12 [ 957.887902] Free memory is -7668kB above reserved [ 957.899746] input: syz1 as /devices/virtual/input/input4738 [ 957.992989] input: syz1 as /devices/virtual/input/input4739 [ 958.029440] input: syz1 as /devices/virtual/input/input4740 [ 958.050310] input: syz1 as /devices/virtual/input/input4741 [ 958.099593] input: syz1 as /devices/virtual/input/input4742 [ 958.185163] input: syz1 as /devices/virtual/input/input4743 [ 958.295650] lowmemorykiller: Killing 'syz-executor.5' (11920) (tgid 11920), adj 1000, [ 958.295650] to free 52272kB on behalf of 'kswapd0' (33) because [ 958.295650] cache 18908kB is below limit 65536kB for oom_score_adj 12 [ 958.295650] Free memory is -6692kB above reserved [ 958.298380] lowmemorykiller: Killing 'syz-executor.5' (11859) (tgid 11859), adj 1000, [ 958.298380] to free 52248kB on behalf of 'kswapd0' (33) because [ 958.298380] cache 18908kB is below limit 65536kB for oom_score_adj 12 [ 958.298380] Free memory is -6940kB above reserved [ 958.306840] lowmemorykiller: Killing 'syz-executor.0' (11899) (tgid 11899), adj 1000, [ 958.306840] to free 52248kB on behalf of 'kswapd0' (33) because [ 958.306840] cache 18908kB is below limit 65536kB for oom_score_adj 12 [ 958.306840] Free memory is -5340kB above reserved [ 958.326906] lowmemorykiller: Killing 'syz-executor.0' (11936) (tgid 11936), adj 1000, [ 958.326906] to free 52248kB on behalf of 'kswapd0' (33) because [ 958.326906] cache 18908kB is below limit 65536kB for oom_score_adj 12 [ 958.326906] Free memory is 13148kB above reserved [ 958.336908] lowmemorykiller: Killing 'syz-executor.1' (11795) (tgid 11795), adj 1000, [ 958.336908] to free 52240kB on behalf of 'kswapd0' (33) because [ 958.336908] cache 18908kB is below limit 65536kB for oom_score_adj 12 [ 958.336908] Free memory is 38724kB above reserved [ 958.346869] lowmemorykiller: Killing 'syz-executor.1' (11925) (tgid 11925), adj 1000, [ 958.346869] to free 52240kB on behalf of 'kswapd0' (33) because [ 958.346869] cache 18908kB is below limit 65536kB for oom_score_adj 12 [ 958.346869] Free memory is 50732kB above reserved [ 958.349842] lowmemorykiller: Killing 'syz-executor.3' (11941) (tgid 11941), adj 1000, [ 958.349842] to free 52240kB on behalf of 'kswapd0' (33) because [ 958.349842] cache 18908kB is below limit 65536kB for oom_score_adj 12 [ 958.349842] Free memory is 58564kB above reserved [ 958.428143] lowmemorykiller: Killing 'syz-executor.1' (11823) (tgid 11823), adj 1000, [ 958.428143] to free 52228kB on behalf of 'kswapd0' (33) because [ 958.428143] cache 18908kB is below limit 65536kB for oom_score_adj 12 [ 958.428143] Free memory is 58440kB above reserved [ 958.550050] input: syz1 as /devices/virtual/input/input4744 [ 958.641760] input: syz1 as /devices/virtual/input/input4745 [ 958.807921] input: syz1 as /devices/virtual/input/input4746 [ 958.821657] input: syz1 as /devices/virtual/input/input4747 [ 958.826078] input: syz1 as /devices/virtual/input/input4748 [ 959.096618] input: syz1 as /devices/virtual/input/input4749 [ 959.237140] lowmemorykiller: Killing 'syz-executor.1' (12007) (tgid 12007), adj 1000, [ 959.237140] to free 52260kB on behalf of 'syz-executor.3' (2072) because [ 959.237140] cache 18868kB is below limit 65536kB for oom_score_adj 12 [ 959.237140] Free memory is -6300kB above reserved [ 959.399206] input: syz1 as /devices/virtual/input/input4750 [ 959.534948] lowmemorykiller: Killing 'syz-executor.1' (12016) (tgid 12016), adj 1000, [ 959.534948] to free 52300kB on behalf of 'udevd' (590) because [ 959.534948] cache 17220kB is below limit 65536kB for oom_score_adj 12 [ 959.534948] Free memory is -5308kB above reserved [ 959.543246] lowmemorykiller: Killing 'syz-executor.3' (11997) (tgid 11997), adj 1000, [ 959.543246] to free 52252kB on behalf of 'syz-executor.5' (12061) because [ 959.543246] cache 17220kB is below limit 65536kB for oom_score_adj 12 [ 959.543246] Free memory is 1892kB above reserved [ 959.556433] lowmemorykiller: Killing 'syz-executor.3' (12045) (tgid 12045), adj 1000, [ 959.556433] to free 52252kB on behalf of 'syz-executor.5' (12061) because [ 959.556433] cache 17220kB is below limit 65536kB for oom_score_adj 12 [ 959.556433] Free memory is 5292kB above reserved [ 959.562150] lowmemorykiller: Killing 'syz-executor.0' (11985) (tgid 11985), adj 1000, [ 959.562150] to free 52248kB on behalf of 'kthreadd' (2) because [ 959.562150] cache 17220kB is below limit 65536kB for oom_score_adj 12 [ 959.562150] Free memory is -5308kB above reserved [ 959.570777] lowmemorykiller: Killing 'syz-executor.5' (12040) (tgid 12040), adj 1000, [ 959.570777] to free 52248kB on behalf of 'kworker/u4:3' (31402) because [ 959.570777] cache 17220kB is below limit 65536kB for oom_score_adj 12 [ 959.570777] Free memory is 46368kB above reserved [ 959.586392] lowmemorykiller: Killing 'syz-executor.0' (12044) (tgid 12044), adj 1000, [ 959.586392] to free 52248kB on behalf of 'kworker/u4:3' (31402) because [ 959.586392] cache 17220kB is below limit 65536kB for oom_score_adj 12 [ 959.586392] Free memory is 50468kB above reserved [ 959.596385] lowmemorykiller: Killing 'syz-executor.1' (11973) (tgid 11973), adj 1000, [ 959.596385] to free 52240kB on behalf of 'udevd' (590) because [ 959.596385] cache 17220kB is below limit 65536kB for oom_score_adj 12 [ 959.596385] Free memory is -5308kB above reserved [ 959.616474] lowmemorykiller: Killing 'syz-executor.5' (11963) (tgid 11963), adj 1000, [ 959.616474] to free 52236kB on behalf of 'kswapd0' (33) because [ 959.616474] cache 17220kB is below limit 65536kB for oom_score_adj 12 [ 959.616474] Free memory is -5308kB above reserved [ 959.646558] lowmemorykiller: Killing 'syz-executor.5' (12010) (tgid 12010), adj 1000, [ 959.646558] to free 52248kB on behalf of 'syz-executor.5' (12061) because [ 959.646558] cache 17220kB is below limit 65536kB for oom_score_adj 12 [ 959.646558] Free memory is 37892kB above reserved [ 959.653488] input: syz1 as /devices/virtual/input/input4751 [ 959.751095] input: syz1 as /devices/virtual/input/input4753 [ 959.766670] input: syz1 as /devices/virtual/input/input4752 [ 959.777058] input: syz1 as /devices/virtual/input/input4754 [ 960.111668] input: syz1 as /devices/virtual/input/input4755 [ 960.178665] input: syz1 as /devices/virtual/input/input4756 [ 960.243754] input: syz1 as /devices/virtual/input/input4757 [ 960.294824] input: syz1 as /devices/virtual/input/input4758 [ 960.540345] input: syz1 as /devices/virtual/input/input4759 [ 960.629901] input: syz1 as /devices/virtual/input/input4760 [ 960.659467] lowmemorykiller: Killing 'syz-executor.5' (12066) (tgid 12066), adj 1000, [ 960.659467] to free 52284kB on behalf of 'kswapd0' (33) because [ 960.659467] cache 16680kB is below limit 65536kB for oom_score_adj 12 [ 960.659467] Free memory is -6700kB above reserved [ 960.661049] lowmemorykiller: Killing 'syz-executor.3' (12078) (tgid 12078), adj 1000, [ 960.661049] to free 52252kB on behalf of 'kswapd0' (33) because [ 960.661049] cache 16680kB is below limit 65536kB for oom_score_adj 12 [ 960.661049] Free memory is -6948kB above reserved [ 960.687168] lowmemorykiller: Killing 'syz-executor.3' (12132) (tgid 12132), adj 1000, [ 960.687168] to free 52252kB on behalf of 'kswapd0' (33) because [ 960.687168] cache 16680kB is below limit 65536kB for oom_score_adj 12 [ 960.687168] Free memory is 1052kB above reserved [ 960.711711] lowmemorykiller: Killing 'syz-executor.0' (12099) (tgid 12099), adj 1000, [ 960.711711] to free 52248kB on behalf of 'kswapd0' (33) because [ 960.711711] cache 16680kB is below limit 65536kB for oom_score_adj 12 [ 960.711711] Free memory is 34548kB above reserved [ 960.716351] lowmemorykiller: Killing 'syz-executor.5' (12142) (tgid 12142), adj 1000, [ 960.716351] to free 52248kB on behalf of 'kswapd0' (33) because [ 960.716351] cache 16680kB is below limit 65536kB for oom_score_adj 12 [ 960.716351] Free memory is 51068kB above reserved [ 960.726356] lowmemorykiller: Killing 'syz-executor.1' (12090) (tgid 12090), adj 1000, [ 960.726356] to free 52240kB on behalf of 'kswapd0' (33) because [ 960.726356] cache 16680kB is below limit 65536kB for oom_score_adj 12 [ 960.726356] Free memory is 52448kB above reserved [ 960.736941] lowmemorykiller: Killing 'syz-executor.3' (28855) (tgid 28855), adj 1000, [ 960.736941] to free 51608kB on behalf of 'kswapd0' (33) because [ 960.736941] cache 16680kB is below limit 65536kB for oom_score_adj 12 [ 960.736941] Free memory is 64720kB above reserved [ 960.798343] input: syz1 as /devices/virtual/input/input4761 [ 960.855669] input: syz1 as /devices/virtual/input/input4762 [ 960.992422] input: syz1 as /devices/virtual/input/input4763 [ 961.210883] input: syz1 as /devices/virtual/input/input4764 [ 961.243880] input: syz1 as /devices/virtual/input/input4765 [ 961.281251] input: syz1 as /devices/virtual/input/input4766 [ 961.376091] input: syz1 as /devices/virtual/input/input4767 [ 961.452935] input: syz1 as /devices/virtual/input/input4768 [ 961.500048] input: syz1 as /devices/virtual/input/input4769 [ 961.612735] lowmemorykiller: Killing 'syz-executor.3' (12163) (tgid 12163), adj 1000, [ 961.612735] to free 52268kB on behalf of 'kswapd0' (33) because [ 961.612735] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 961.612735] Free memory is -6712kB above reserved [ 961.616707] lowmemorykiller: Killing 'syz-executor.0' (12113) (tgid 12113), adj 1000, [ 961.616707] to free 52260kB on behalf of 'kswapd0' (33) because [ 961.616707] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 961.616707] Free memory is -6960kB above reserved [ 961.622650] lowmemorykiller: Killing 'syz-executor.5' (12169) (tgid 12169), adj 1000, [ 961.622650] to free 52256kB on behalf of 'kswapd0' (33) because [ 961.622650] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 961.622650] Free memory is -2360kB above reserved [ 961.639031] lowmemorykiller: Killing 'syz-executor.0' (12183) (tgid 12183), adj 1000, [ 961.639031] to free 52248kB on behalf of 'kswapd0' (33) because [ 961.639031] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 961.639031] Free memory is 10340kB above reserved [ 961.659637] lowmemorykiller: Killing 'syz-executor.1' (12122) (tgid 12122), adj 1000, [ 961.659637] to free 52240kB on behalf of 'kswapd0' (33) because [ 961.659637] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 961.659637] Free memory is 39272kB above reserved [ 961.687841] lowmemorykiller: Killing 'syz-executor.1' (12195) (tgid 12195), adj 1000, [ 961.687841] to free 52236kB on behalf of 'kswapd0' (33) because [ 961.687841] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 961.687841] Free memory is 50340kB above reserved [ 961.822480] input: syz1 as /devices/virtual/input/input4770 [ 961.867591] input: syz1 as /devices/virtual/input/input4771 [ 962.004947] input: syz1 as /devices/virtual/input/input4773 [ 962.005098] input: syz1 as /devices/virtual/input/input4772 [ 962.245199] lowmemorykiller: Killing 'syz-executor.5' (12215) (tgid 12215), adj 1000, [ 962.245199] to free 52248kB on behalf of 'kswapd0' (33) because [ 962.245199] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 962.245199] Free memory is -6616kB above reserved [ 962.276797] lowmemorykiller: Killing 'syz-executor.0' (12217) (tgid 12217), adj 1000, [ 962.276797] to free 52248kB on behalf of 'kswapd0' (33) because [ 962.276797] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 962.276797] Free memory is -6616kB above reserved [ 962.286976] lowmemorykiller: Killing 'syz-executor.5' (12264) (tgid 12264), adj 1000, [ 962.286976] to free 52248kB on behalf of 'kswapd0' (33) because [ 962.286976] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 962.286976] Free memory is 19392kB above reserved [ 962.312179] lowmemorykiller: Killing 'syz-executor.3' (12244) (tgid 12244), adj 1000, [ 962.312179] to free 52240kB on behalf of 'kswapd0' (33) because [ 962.312179] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 962.312179] Free memory is 28024kB above reserved [ 962.346059] lowmemorykiller: Killing 'syz-executor.1' (12282) (tgid 12282), adj 1000, [ 962.346059] to free 52240kB on behalf of 'kswapd0' (33) because [ 962.346059] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 962.346059] Free memory is 47560kB above reserved [ 962.355664] input: syz1 as /devices/virtual/input/input4774 [ 962.374748] lowmemorykiller: Killing 'syz-executor.0' (12268) (tgid 12268), adj 1000, [ 962.374748] to free 52248kB on behalf of 'kswapd0' (33) because [ 962.374748] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 962.374748] Free memory is 62676kB above reserved [ 962.386510] lowmemorykiller: Killing 'syz-executor.1' (12247) (tgid 12247), adj 1000, [ 962.386510] to free 52228kB on behalf of 'kswapd0' (33) because [ 962.386510] cache 17996kB is below limit 65536kB for oom_score_adj 12 [ 962.386510] Free memory is 65232kB above reserved [ 962.398075] input: syz1 as /devices/virtual/input/input4775 [ 962.433499] input: syz1 as /devices/virtual/input/input4776 [ 962.559390] input: syz1 as /devices/virtual/input/input4777 [ 962.803976] input: syz1 as /devices/virtual/input/input4778 [ 962.812834] input: syz1 as /devices/virtual/input/input4779 [ 962.863901] input: syz1 as /devices/virtual/input/input4780 [ 962.915391] input: syz1 as /devices/virtual/input/input4781 [ 962.950412] input: syz1 as /devices/virtual/input/input4782 [ 962.981716] input: syz1 as /devices/virtual/input/input4783 [ 963.120490] lowmemorykiller: Killing 'syz-executor.5' (12299) (tgid 12299), adj 1000, [ 963.120490] to free 52308kB on behalf of 'kswapd0' (33) because [ 963.120490] cache 18028kB is below limit 65536kB for oom_score_adj 12 [ 963.120490] Free memory is -6712kB above reserved [ 963.143731] lowmemorykiller: Killing 'syz-executor.3' (12281) (tgid 12281), adj 1000, [ 963.143731] to free 52252kB on behalf of 'kswapd0' (33) because [ 963.143731] cache 18028kB is below limit 65536kB for oom_score_adj 12 [ 963.143731] Free memory is -7332kB above reserved [ 963.156613] lowmemorykiller: Killing 'syz-executor.3' (12325) (tgid 12325), adj 1000, [ 963.156613] to free 52252kB on behalf of 'kswapd0' (33) because [ 963.156613] cache 18028kB is below limit 65536kB for oom_score_adj 12 [ 963.156613] Free memory is 4660kB above reserved [ 963.167078] lowmemorykiller: Killing 'syz-executor.0' (12310) (tgid 12310), adj 1000, [ 963.167078] to free 52248kB on behalf of 'kswapd0' (33) because [ 963.167078] cache 18028kB is below limit 65536kB for oom_score_adj 12 [ 963.167078] Free memory is 29360kB above reserved [ 963.169146] lowmemorykiller: Killing 'syz-executor.1' (12316) (tgid 12316), adj 1000, [ 963.169146] to free 52240kB on behalf of 'kswapd0' (33) because [ 963.169146] cache 18028kB is below limit 65536kB for oom_score_adj 12 [ 963.169146] Free memory is 42948kB above reserved [ 963.170987] lowmemorykiller: Killing 'syz-executor.3' (28926) (tgid 28926), adj 1000, [ 963.170987] to free 51608kB on behalf of 'kswapd0' (33) because [ 963.170987] cache 18028kB is below limit 65536kB for oom_score_adj 12 [ 963.170987] Free memory is 43448kB above reserved [ 963.332413] input: syz1 as /devices/virtual/input/input4784 [ 963.373809] input: syz1 as /devices/virtual/input/input4785 [ 963.715928] input: syz1 as /devices/virtual/input/input4786 [ 963.727748] input: syz1 as /devices/virtual/input/input4787 [ 963.735323] input: syz1 as /devices/virtual/input/input4788 [ 963.753907] input: syz1 as /devices/virtual/input/input4789 [ 963.828444] input: syz1 as /devices/virtual/input/input4790 [ 963.864374] lowmemorykiller: Killing 'syz-executor.2' (12379) (tgid 12379), adj 1000, [ 963.864374] to free 52296kB on behalf of 'kswapd0' (33) because [ 963.864374] cache 18144kB is below limit 65536kB for oom_score_adj 12 [ 963.864374] Free memory is -6688kB above reserved [ 963.883161] lowmemorykiller: Killing 'syz-executor.0' (12392) (tgid 12392), adj 1000, [ 963.883161] to free 52260kB on behalf of 'kswapd0' (33) because [ 963.883161] cache 18144kB is below limit 65536kB for oom_score_adj 12 [ 963.883161] Free memory is -6936kB above reserved [ 963.885055] lowmemorykiller: Killing 'syz-executor.0' (12348) (tgid 12348), adj 1000, [ 963.885055] to free 52256kB on behalf of 'kswapd0' (33) because [ 963.885055] cache 18340kB is below limit 65536kB for oom_score_adj 12 [ 963.885055] Free memory is -488kB above reserved [ 963.911380] lowmemorykiller: Killing 'syz-executor.3' (12369) (tgid 12369), adj 1000, [ 963.911380] to free 52252kB on behalf of 'kswapd0' (33) because [ 963.911380] cache 18340kB is below limit 65536kB for oom_score_adj 12 [ 963.911380] Free memory is -488kB above reserved [ 963.913426] lowmemorykiller: Killing 'syz-executor.3' (12399) (tgid 12399), adj 1000, [ 963.913426] to free 52252kB on behalf of 'kswapd0' (33) because [ 963.913426] cache 18488kB is below limit 65536kB for oom_score_adj 12 [ 963.913426] Free memory is 28216kB above reserved [ 963.933459] lowmemorykiller: Killing 'syz-executor.5' (12359) (tgid 12359), adj 1000, [ 963.933459] to free 52244kB on behalf of 'kswapd0' (33) because [ 963.933459] cache 18488kB is below limit 65536kB for oom_score_adj 12 [ 963.933459] Free memory is 27968kB above reserved [ 963.964987] lowmemorykiller: Killing 'syz-executor.1' (12374) (tgid 12374), adj 1000, [ 963.964987] to free 52240kB on behalf of 'kswapd0' (33) because [ 963.964987] cache 18684kB is below limit 65536kB for oom_score_adj 12 [ 963.964987] Free memory is 43184kB above reserved [ 964.274115] input: syz1 as /devices/virtual/input/input4791 [ 964.274258] input: syz1 as /devices/virtual/input/input4792 [ 964.275290] input: syz1 as /devices/virtual/input/input4793 [ 964.338630] input: syz1 as /devices/virtual/input/input4794 [ 964.380680] input: syz1 as /devices/virtual/input/input4795 [ 964.602755] lowmemorykiller: Killing 'syz-executor.1' (12430) (tgid 12430), adj 1000, [ 964.602755] to free 52272kB on behalf of 'kswapd0' (33) because [ 964.602755] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 964.602755] Free memory is -6680kB above reserved [ 964.616523] lowmemorykiller: Killing 'syz-executor.3' (12433) (tgid 12433), adj 1000, [ 964.616523] to free 52252kB on behalf of 'kswapd0' (33) because [ 964.616523] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 964.616523] Free memory is -6804kB above reserved [ 964.626395] lowmemorykiller: Killing 'syz-executor.5' (12432) (tgid 12432), adj 1000, [ 964.626395] to free 52248kB on behalf of 'kswapd0' (33) because [ 964.626395] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 964.626395] Free memory is 17484kB above reserved [ 964.638118] lowmemorykiller: Killing 'syz-executor.1' (12486) (tgid 12486), adj 1000, [ 964.638118] to free 52240kB on behalf of 'kswapd0' (33) because [ 964.638118] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 964.638118] Free memory is 30960kB above reserved [ 964.653336] lowmemorykiller: Killing 'syz-executor.0' (12447) (tgid 12447), adj 1000, [ 964.653336] to free 52236kB on behalf of 'kswapd0' (33) because [ 964.653336] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 964.653336] Free memory is 43496kB above reserved [ 964.655105] lowmemorykiller: Killing 'syz-executor.3' (29004) (tgid 29004), adj 1000, [ 964.655105] to free 51608kB on behalf of 'kswapd0' (33) because [ 964.655105] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 964.655105] Free memory is 53712kB above reserved [ 964.720914] input: syz1 as /devices/virtual/input/input4796 [ 964.761134] input: syz1 as /devices/virtual/input/input4797 [ 964.963475] input: syz1 as /devices/virtual/input/input4798 [ 965.081959] input: syz1 as /devices/virtual/input/input4799 [ 965.089741] input: syz1 as /devices/virtual/input/input4800 [ 965.280377] lowmemorykiller: Killing 'syz-executor.3' (12475) (tgid 12475), adj 1000, [ 965.280377] to free 52252kB on behalf of 'kswapd0' (33) because [ 965.280377] cache 18672kB is below limit 65536kB for oom_score_adj 12 [ 965.280377] Free memory is -6860kB above reserved [ 965.282039] lowmemorykiller: Killing 'syz-executor.3' (12529) (tgid 12529), adj 1000, [ 965.282039] to free 52252kB on behalf of 'kswapd0' (33) because [ 965.282039] cache 18672kB is below limit 65536kB for oom_score_adj 12 [ 965.282039] Free memory is -7012kB above reserved [ 965.299310] lowmemorykiller: Killing 'syz-executor.5' (12471) (tgid 12471), adj 1000, [ 965.299310] to free 52248kB on behalf of 'kswapd0' (33) because [ 965.299310] cache 18672kB is below limit 65536kB for oom_score_adj 12 [ 965.299310] Free memory is 288kB above reserved [ 965.325283] lowmemorykiller: Killing 'syz-executor.0' (12492) (tgid 12492), adj 1000, [ 965.325283] to free 52248kB on behalf of 'kswapd0' (33) because [ 965.325283] cache 18672kB is below limit 65536kB for oom_score_adj 12 [ 965.325283] Free memory is 19896kB above reserved [ 965.347471] lowmemorykiller: Killing 'syz-executor.0' (12513) (tgid 12513), adj 1000, [ 965.347471] to free 52244kB on behalf of 'kswapd0' (33) because [ 965.347471] cache 18672kB is below limit 65536kB for oom_score_adj 12 [ 965.347471] Free memory is 46008kB above reserved [ 965.375937] lowmemorykiller: Killing 'syz-executor.1' (12506) (tgid 12506), adj 1000, [ 965.375937] to free 52240kB on behalf of 'kswapd0' (33) because [ 965.375937] cache 18672kB is below limit 65536kB for oom_score_adj 12 [ 965.375937] Free memory is 62156kB above reserved [ 965.429905] input: syz1 as /devices/virtual/input/input4801 [ 965.435814] input: syz1 as /devices/virtual/input/input4802 [ 965.460970] input: syz1 as /devices/virtual/input/input4803 [ 965.469278] input: syz1 as /devices/virtual/input/input4804 [ 965.706845] input: syz1 as /devices/virtual/input/input4805 [ 965.810438] input: syz1 as /devices/virtual/input/input4806 [ 965.845591] input: syz1 as /devices/virtual/input/input4807 [ 965.893866] input: syz1 as /devices/virtual/input/input4808 [ 965.990053] input: syz1 as /devices/virtual/input/input4809 [ 966.008205] lowmemorykiller: Killing 'syz-executor.3' (12572) (tgid 12572), adj 1000, [ 966.008205] to free 52252kB on behalf of 'kswapd0' (33) because [ 966.008205] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 966.008205] Free memory is -3904kB above reserved [ 966.009857] lowmemorykiller: Killing 'syz-executor.5' (12541) (tgid 12541), adj 1000, [ 966.009857] to free 52248kB on behalf of 'kswapd0' (33) because [ 966.009857] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 966.009857] Free memory is -4276kB above reserved [ 966.016397] lowmemorykiller: Killing 'syz-executor.1' (12543) (tgid 12543), adj 1000, [ 966.016397] to free 52264kB on behalf of 'syz-executor.3' (12607) because [ 966.016397] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 966.016397] Free memory is -6060kB above reserved [ 966.032032] lowmemorykiller: Killing 'syz-executor.0' (12573) (tgid 12573), adj 1000, [ 966.032032] to free 52248kB on behalf of 'syz-executor.3' (12607) because [ 966.032032] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 966.032032] Free memory is 7824kB above reserved [ 966.034961] lowmemorykiller: Killing 'syz-executor.1' (12600) (tgid 12600), adj 1000, [ 966.034961] to free 52240kB on behalf of 'syz-executor.3' (12607) because [ 966.034961] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 966.034961] Free memory is 37668kB above reserved [ 966.048467] lowmemorykiller: Killing 'syz-executor.5' (12583) (tgid 12583), adj 1000, [ 966.048467] to free 52236kB on behalf of 'syz-executor.3' (12607) because [ 966.048467] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 966.048467] Free memory is 41844kB above reserved [ 966.061294] lowmemorykiller: Killing 'syz-executor.2' (12464) (tgid 12464), adj 1000, [ 966.061294] to free 51724kB on behalf of 'syz-executor.3' (12607) because [ 966.061294] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 966.061294] Free memory is 60924kB above reserved [ 966.075332] lowmemorykiller: Killing 'syz-executor.3' (29072) (tgid 29072), adj 1000, [ 966.075332] to free 51608kB on behalf of 'kswapd0' (33) because [ 966.075332] cache 18156kB is below limit 65536kB for oom_score_adj 12 [ 966.075332] Free memory is 6824kB above reserved [ 966.410246] input: syz1 as /devices/virtual/input/input4810 [ 966.425307] input: syz1 as /devices/virtual/input/input4811 [ 966.425431] input: syz1 as /devices/virtual/input/input4812 [ 966.442014] input: syz1 as /devices/virtual/input/input4813 [ 966.697151] input: syz1 as /devices/virtual/input/input4814 [ 966.813862] input: syz1 as /devices/virtual/input/input4815 [ 966.814922] input: syz1 as /devices/virtual/input/input4816 [ 966.929155] lowmemorykiller: Killing 'syz-executor.4' (12577) (tgid 12577), adj 1000, [ 966.929155] to free 52288kB on behalf of 'kworker/u4:6' (14084) because [ 966.929155] cache 18072kB is below limit 65536kB for oom_score_adj 12 [ 966.929155] Free memory is -6616kB above reserved [ 966.929165] lowmemorykiller: Killing 'syz-executor.4' (12577) (tgid 12577), adj 1000, [ 966.929165] to free 52288kB on behalf of 'kswapd0' (33) because [ 966.929165] cache 18072kB is below limit 65536kB for oom_score_adj 12 [ 966.929165] Free memory is -6616kB above reserved [ 966.956374] lowmemorykiller: Killing 'syz-executor.0' (12653) (tgid 12653), adj 1000, [ 966.956374] to free 52260kB on behalf of 'syz-executor.0' (12706) because [ 966.956374] cache 18072kB is below limit 65536kB for oom_score_adj 12 [ 966.956374] Free memory is -7852kB above reserved [ 966.966385] lowmemorykiller: Killing 'syz-executor.3' (12614) (tgid 12614), adj 1000, [ 966.966385] to free 52252kB on behalf of 'syz-executor.0' (12706) because [ 966.966385] cache 18072kB is below limit 65536kB for oom_score_adj 12 [ 966.966385] Free memory is 23748kB above reserved [ 966.977658] lowmemorykiller: Killing 'syz-executor.3' (12665) (tgid 12665), adj 1000, [ 966.977658] to free 52252kB on behalf of 'syz-executor.0' (12706) because [ 966.977658] cache 18072kB is below limit 65536kB for oom_score_adj 12 [ 966.977658] Free memory is 34868kB above reserved [ 966.987235] lowmemorykiller: Killing 'syz-executor.5' (12623) (tgid 12623), adj 1000, [ 966.987235] to free 52248kB on behalf of 'syz-executor.0' (12706) because [ 966.987235] cache 18072kB is below limit 65536kB for oom_score_adj 12 [ 966.987235] Free memory is 46236kB above reserved [ 966.989045] lowmemorykiller: Killing 'syz-executor.0' (12629) (tgid 12629), adj 1000, [ 966.989045] to free 52248kB on behalf of 'syz-executor.0' (12706) because [ 966.989045] cache 18072kB is below limit 65536kB for oom_score_adj 12 [ 966.989045] Free memory is 54768kB above reserved [ 967.016730] lowmemorykiller: Killing 'syz-executor.1' (12657) (tgid 12657), adj 1000, [ 967.016730] to free 52240kB on behalf of 'kswapd0' (33) because [ 967.016730] cache 18072kB is below limit 65536kB for oom_score_adj 12 [ 967.016730] Free memory is -6616kB above reserved [ 967.037749] lowmemorykiller: Killing 'syz-executor.5' (12663) (tgid 12663), adj 1000, [ 967.037749] to free 52248kB on behalf of 'syz-executor.0' (12706) because [ 967.037749] cache 18072kB is below limit 65536kB for oom_score_adj 12 [ 967.037749] Free memory is 54768kB above reserved [ 967.102152] lowmemorykiller: Killing 'syz-executor.2' (12592) (tgid 12592), adj 1000, [ 967.102152] to free 51924kB on behalf of 'kworker/u4:6' (14084) because [ 967.102152] cache 18072kB is below limit 65536kB for oom_score_adj 12 [ 967.102152] Free memory is -7852kB above reserved [ 967.117863] input: syz1 as /devices/virtual/input/input4817 [ 967.130881] input: syz1 as /devices/virtual/input/input4818 [ 967.361468] input: syz1 as /devices/virtual/input/input4819 [ 967.367206] input: syz1 as /devices/virtual/input/input4820 [ 967.370184] input: syz1 as /devices/virtual/input/input4821 [ 967.605337] input: syz1 as /devices/virtual/input/input4823 [ 967.654103] input: syz1 as /devices/virtual/input/input4822 [ 967.681699] input: syz1 as /devices/virtual/input/input4824 [ 967.910319] input: syz1 as /devices/virtual/input/input4825 [ 967.922191] input: syz1 as /devices/virtual/input/input4826 [ 968.065250] lowmemorykiller: Killing 'syz-executor.1' (12695) (tgid 12695), adj 1000, [ 968.065250] to free 52268kB on behalf of 'syz-executor.1' (12783) because [ 968.065250] cache 17680kB is below limit 65536kB for oom_score_adj 12 [ 968.065250] Free memory is -6304kB above reserved [ 968.065259] lowmemorykiller: Killing 'syz-executor.1' (12695) (tgid 12695), adj 1000, [ 968.065259] to free 52268kB on behalf of 'kswapd0' (33) because [ 968.065259] cache 17680kB is below limit 65536kB for oom_score_adj 12 [ 968.065259] Free memory is -6304kB above reserved [ 968.067047] lowmemorykiller: Killing 'syz-executor.3' (12723) (tgid 12723), adj 1000, [ 968.067047] to free 52252kB on behalf of 'syz-executor.1' (12783) because [ 968.067047] cache 17680kB is below limit 65536kB for oom_score_adj 12 [ 968.067047] Free memory is -6304kB above reserved [ 968.086626] lowmemorykiller: Killing 'syz-executor.5' (12697) (tgid 12697), adj 1000, [ 968.086626] to free 52248kB on behalf of 'syz-executor.1' (12783) because [ 968.086626] cache 17680kB is below limit 65536kB for oom_score_adj 12 [ 968.086626] Free memory is 596kB above reserved [ 968.096384] lowmemorykiller: Killing 'syz-executor.0' (12768) (tgid 12768), adj 1000, [ 968.096384] to free 52248kB on behalf of 'kswapd0' (33) because [ 968.096384] cache 17680kB is below limit 65536kB for oom_score_adj 12 [ 968.096384] Free memory is -6304kB above reserved [ 968.097852] lowmemorykiller: Killing 'syz-executor.3' (12778) (tgid 12778), adj 1000, [ 968.097852] to free 52248kB on behalf of 'syz-executor.1' (12783) because [ 968.097852] cache 17680kB is below limit 65536kB for oom_score_adj 12 [ 968.097852] Free memory is 32712kB above reserved [ 968.106866] lowmemorykiller: Killing 'syz-executor.0' (12722) (tgid 12722), adj 1000, [ 968.106866] to free 52244kB on behalf of 'syz-executor.1' (12783) because [ 968.106866] cache 17680kB is below limit 65536kB for oom_score_adj 12 [ 968.106866] Free memory is 44812kB above reserved [ 968.117026] lowmemorykiller: Killing 'syz-executor.5' (12743) (tgid 12743), adj 1000, [ 968.117026] to free 52244kB on behalf of 'kswapd0' (33) because [ 968.117026] cache 17680kB is below limit 65536kB for oom_score_adj 12 [ 968.117026] Free memory is 45060kB above reserved [ 968.141172] input: syz1 as /devices/virtual/input/input4827 [ 968.226095] input: syz1 as /devices/virtual/input/input4828 [ 968.436589] input: syz1 as /devices/virtual/input/input4829 [ 968.503694] input: syz1 as /devices/virtual/input/input4830 [ 968.534684] input: syz1 as /devices/virtual/input/input4831 [ 968.582196] input: syz1 as /devices/virtual/input/input4832 [ 968.819987] lowmemorykiller: Killing 'syz-executor.1' (12794) (tgid 12794), adj 1000, [ 968.819987] to free 52268kB on behalf of 'kswapd0' (33) because [ 968.819987] cache 17536kB is below limit 65536kB for oom_score_adj 12 [ 968.819987] Free memory is -6688kB above reserved [ 968.827508] lowmemorykiller: Killing 'syz-executor.5' (12797) (tgid 12797), adj 1000, [ 968.827508] to free 52248kB on behalf of 'kswapd0' (33) because [ 968.827508] cache 17536kB is below limit 65536kB for oom_score_adj 12 [ 968.827508] Free memory is -4460kB above reserved [ 968.835119] lowmemorykiller: Killing 'syz-executor.3' (12819) (tgid 12819), adj 1000, [ 968.835119] to free 52248kB on behalf of 'kswapd0' (33) because [ 968.835119] cache 17536kB is below limit 65536kB for oom_score_adj 12 [ 968.835119] Free memory is 12320kB above reserved [ 968.861379] lowmemorykiller: Killing 'syz-executor.0' (12813) (tgid 12813), adj 1000, [ 968.861379] to free 52244kB on behalf of 'kswapd0' (33) because [ 968.861379] cache 17536kB is below limit 65536kB for oom_score_adj 12 [ 968.861379] Free memory is 15028kB above reserved [ 968.878058] lowmemorykiller: Killing 'syz-executor.1' (12845) (tgid 12845), adj 1000, [ 968.878058] to free 52240kB on behalf of 'kswapd0' (33) because [ 968.878058] cache 17536kB is below limit 65536kB for oom_score_adj 12 [ 968.878058] Free memory is 46736kB above reserved [ 968.900587] lowmemorykiller: Killing 'syz-executor.0' (12853) (tgid 12853), adj 1000, [ 968.900587] to free 52248kB on behalf of 'kswapd0' (33) because [ 968.900587] cache 17536kB is below limit 65536kB for oom_score_adj 12 [ 968.900587] Free memory is 61848kB above reserved [ 968.933536] input: syz1 as /devices/virtual/input/input4833 [ 968.996118] input: syz1 as /devices/virtual/input/input4834 [ 969.029358] input: syz1 as /devices/virtual/input/input4836 [ 969.029388] input: syz1 as /devices/virtual/input/input4835 [ 969.058261] input: syz1 as /devices/virtual/input/input4837 [ 969.110406] input: syz1 as /devices/virtual/input/input4838 [ 969.413883] input: syz1 as /devices/virtual/input/input4839 [ 969.522970] lowmemorykiller: Killing 'syz-executor.5' (12832) (tgid 12832), adj 1000, [ 969.522970] to free 52272kB on behalf of 'kswapd0' (33) because [ 969.522970] cache 17544kB is below limit 65536kB for oom_score_adj 12 [ 969.522970] Free memory is -6608kB above reserved [ 969.536577] lowmemorykiller: Killing 'syz-executor.3' (12862) (tgid 12862), adj 1000, [ 969.536577] to free 52252kB on behalf of 'kswapd0' (33) because [ 969.536577] cache 17544kB is below limit 65536kB for oom_score_adj 12 [ 969.536577] Free memory is -6608kB above reserved [ 969.558451] lowmemorykiller: Killing 'syz-executor.3' (12912) (tgid 12912), adj 1000, [ 969.558451] to free 52252kB on behalf of 'kswapd0' (33) because [ 969.558451] cache 17544kB is below limit 65536kB for oom_score_adj 12 [ 969.558451] Free memory is 23092kB above reserved [ 969.608501] lowmemorykiller: Killing 'syz-executor.0' (12900) (tgid 12900), adj 1000, [ 969.608501] to free 52248kB on behalf of 'kswapd0' (33) because [ 969.608501] cache 17544kB is below limit 65536kB for oom_score_adj 12 [ 969.608501] Free memory is 30388kB above reserved [ 969.624571] lowmemorykiller: Killing 'syz-executor.1' (12741) (tgid 12741), adj 1000, [ 969.624571] to free 52236kB on behalf of 'kswapd0' (33) because [ 969.624571] cache 17692kB is below limit 65536kB for oom_score_adj 12 [ 969.624571] Free memory is 50392kB above reserved [ 969.665980] lowmemorykiller: Killing 'syz-executor.5' (12899) (tgid 12899), adj 1000, [ 969.665980] to free 52236kB on behalf of 'kswapd0' (33) because [ 969.665980] cache 18136kB is below limit 65536kB for oom_score_adj 12 [ 969.665980] Free memory is 47660kB above reserved [ 969.672752] input: syz1 as /devices/virtual/input/input4840 [ 969.684221] input: syz1 as /devices/virtual/input/input4841 [ 969.692696] input: syz1 as /devices/virtual/input/input4842 [ 969.940485] input: syz1 as /devices/virtual/input/input4843 [ 970.019670] input: syz1 as /devices/virtual/input/input4844 [ 970.028780] input: syz1 as /devices/virtual/input/input4845 [ 970.109459] input: syz1 as /devices/virtual/input/input4846 [ 970.172275] input: syz1 as /devices/virtual/input/input4847 [ 970.256116] lowmemorykiller: Killing 'syz-executor.4' (12909) (tgid 12909), adj 1000, [ 970.256116] to free 52292kB on behalf of 'kswapd0' (33) because [ 970.256116] cache 18092kB is below limit 65536kB for oom_score_adj 12 [ 970.256116] Free memory is -6680kB above reserved [ 970.260406] lowmemorykiller: Killing 'syz-executor.5' (12925) (tgid 12925), adj 1000, [ 970.260406] to free 52280kB on behalf of 'kswapd0' (33) because [ 970.260406] cache 18092kB is below limit 65536kB for oom_score_adj 12 [ 970.260406] Free memory is -7144kB above reserved [ 970.272638] lowmemorykiller: Killing 'syz-executor.0' (12946) (tgid 12946), adj 1000, [ 970.272638] to free 52256kB on behalf of 'kswapd0' (33) because [ 970.272638] cache 18092kB is below limit 65536kB for oom_score_adj 12 [ 970.272638] Free memory is -7640kB above reserved [ 970.285375] lowmemorykiller: Killing 'syz-executor.3' (12947) (tgid 12947), adj 1000, [ 970.285375] to free 52248kB on behalf of 'kswapd0' (33) because [ 970.285375] cache 18092kB is below limit 65536kB for oom_score_adj 12 [ 970.285375] Free memory is 10172kB above reserved [ 970.311553] lowmemorykiller: Killing 'syz-executor.1' (12955) (tgid 12955), adj 1000, [ 970.311553] to free 52240kB on behalf of 'kswapd0' (33) because [ 970.311553] cache 18092kB is below limit 65536kB for oom_score_adj 12 [ 970.311553] Free memory is 12528kB above reserved [ 970.333212] lowmemorykiller: Killing 'syz-executor.1' (12895) (tgid 12895), adj 1000, [ 970.333212] to free 52228kB on behalf of 'kswapd0' (33) because [ 970.333212] cache 17592kB is below limit 65536kB for oom_score_adj 12 [ 970.333212] Free memory is 42064kB above reserved [ 970.357990] lowmemorykiller: Killing 'syz-executor.3' (29197) (tgid 29197), adj 1000, [ 970.357990] to free 51608kB on behalf of 'kswapd0' (33) because [ 970.357990] cache 17592kB is below limit 65536kB for oom_score_adj 12 [ 970.357990] Free memory is 54496kB above reserved [ 970.492839] input: syz1 as /devices/virtual/input/input4848 [ 970.546618] input: syz1 as /devices/virtual/input/input4849 [ 970.592648] input: syz1 as /devices/virtual/input/input4850 [ 970.637581] input: syz1 as /devices/virtual/input/input4851 [ 970.817072] input: syz1 as /devices/virtual/input/input4852 [ 971.008931] input: syz1 as /devices/virtual/input/input4853 [ 971.050118] input: syz1 as /devices/virtual/input/input4854 [ 971.091311] input: syz1 as /devices/virtual/input/input4856 [ 971.101113] input: syz1 as /devices/virtual/input/input4855 [ 971.125441] lowmemorykiller: Killing 'syz-executor.5' (12967) (tgid 12967), adj 1000, [ 971.125441] to free 52272kB on behalf of 'kswapd0' (33) because [ 971.125441] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 971.125441] Free memory is -6664kB above reserved [ 971.145607] lowmemorykiller: Killing 'syz-executor.5' (13022) (tgid 13022), adj 1000, [ 971.145607] to free 52272kB on behalf of 'kswapd0' (33) because [ 971.145607] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 971.145607] Free memory is -6972kB above reserved [ 971.157009] lowmemorykiller: Killing 'syz-executor.0' (12979) (tgid 12979), adj 1000, [ 971.157009] to free 52248kB on behalf of 'kswapd0' (33) because [ 971.157009] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 971.157009] Free memory is 15260kB above reserved [ 971.185800] lowmemorykiller: Killing 'syz-executor.0' (13035) (tgid 13035), adj 1000, [ 971.185800] to free 52244kB on behalf of 'kswapd0' (33) because [ 971.185800] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 971.185800] Free memory is 19480kB above reserved [ 971.187674] lowmemorykiller: Killing 'syz-executor.3' (12997) (tgid 12997), adj 1000, [ 971.187674] to free 52240kB on behalf of 'kswapd0' (33) because [ 971.187674] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 971.187674] Free memory is 55376kB above reserved [ 971.203723] lowmemorykiller: Killing 'syz-executor.1' (13005) (tgid 13005), adj 1000, [ 971.203723] to free 52240kB on behalf of 'kswapd0' (33) because [ 971.203723] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 971.203723] Free memory is 55376kB above reserved [ 971.536580] input: syz1 as /devices/virtual/input/input4857 [ 971.575699] input: syz1 as /devices/virtual/input/input4858 [ 971.706350] input: syz1 as /devices/virtual/input/input4859 [ 971.755195] input: syz1 as /devices/virtual/input/input4861 [ 971.806356] lowmemorykiller: Killing 'syz-executor.0' (13063) (tgid 13063), adj 1000, [ 971.806356] to free 52264kB on behalf of 'kswapd0' (33) because [ 971.806356] cache 17448kB is below limit 65536kB for oom_score_adj 12 [ 971.806356] Free memory is -6648kB above reserved [ 971.817428] lowmemorykiller: Killing 'syz-executor.3' (13050) (tgid 13050), adj 1000, [ 971.817428] to free 52252kB on behalf of 'kswapd0' (33) because [ 971.817428] cache 17448kB is below limit 65536kB for oom_score_adj 12 [ 971.817428] Free memory is 3540kB above reserved [ 971.834768] lowmemorykiller: Killing 'syz-executor.3' (13110) (tgid 13110), adj 1000, [ 971.834768] to free 52276kB on behalf of 'kswapd0' (33) because [ 971.834768] cache 17448kB is below limit 65536kB for oom_score_adj 12 [ 971.834768] Free memory is 14820kB above reserved [ 971.836670] lowmemorykiller: Killing 'syz-executor.1' (13085) (tgid 13085), adj 1000, [ 971.836670] to free 52252kB on behalf of 'kswapd0' (33) because [ 971.836670] cache 17448kB is below limit 65536kB for oom_score_adj 12 [ 971.836670] Free memory is 30108kB above reserved [ 971.838338] lowmemorykiller: Killing 'syz-executor.5' (13079) (tgid 13079), adj 1000, [ 971.838338] to free 52244kB on behalf of 'kswapd0' (33) because [ 971.838338] cache 17448kB is below limit 65536kB for oom_score_adj 12 [ 971.838338] Free memory is 29860kB above reserved [ 971.905200] input: syz1 as /devices/virtual/input/input4860 [ 971.954873] input: syz1 as /devices/virtual/input/input4862 [ 972.110232] input: syz1 as /devices/virtual/input/input4863 [ 972.307684] input: syz1 as /devices/virtual/input/input4864 [ 972.356185] input: syz1 as /devices/virtual/input/input4865 [ 972.439106] lowmemorykiller: Killing 'syz-executor.2' (13066) (tgid 13066), adj 1000, [ 972.439106] to free 52328kB on behalf of 'kswapd0' (33) because [ 972.439106] cache 17684kB is below limit 65536kB for oom_score_adj 12 [ 972.439106] Free memory is -6676kB above reserved [ 972.443793] input: syz1 as /devices/virtual/input/input4866 [ 972.445596] lowmemorykiller: Killing 'syz-executor.3' (13151) (tgid 13151), adj 1000, [ 972.445596] to free 52276kB on behalf of 'kswapd0' (33) because [ 972.445596] cache 17684kB is below limit 65536kB for oom_score_adj 12 [ 972.445596] Free memory is -6832kB above reserved [ 972.457826] lowmemorykiller: Killing 'syz-executor.0' (13115) (tgid 13115), adj 1000, [ 972.457826] to free 52248kB on behalf of 'kswapd0' (33) because [ 972.457826] cache 17684kB is below limit 65536kB for oom_score_adj 12 [ 972.457826] Free memory is -2920kB above reserved [ 972.482162] lowmemorykiller: Killing 'syz-executor.1' (13040) (tgid 13040), adj 1000, [ 972.482162] to free 52240kB on behalf of 'kswapd0' (33) because [ 972.482162] cache 17684kB is below limit 65536kB for oom_score_adj 12 [ 972.482162] Free memory is 7668kB above reserved [ 972.484808] lowmemorykiller: Killing 'syz-executor.5' (13132) (tgid 13132), adj 1000, [ 972.484808] to free 52236kB on behalf of 'kswapd0' (33) because [ 972.484808] cache 17796kB is below limit 65536kB for oom_score_adj 12 [ 972.484808] Free memory is 27112kB above reserved [ 972.504596] lowmemorykiller: Killing 'syz-executor.1' (13136) (tgid 13136), adj 1000, [ 972.504596] to free 52236kB on behalf of 'kswapd0' (33) because [ 972.504596] cache 17796kB is below limit 65536kB for oom_score_adj 12 [ 972.504596] Free memory is 26740kB above reserved [ 972.523071] lowmemorykiller: Killing 'syz-executor.3' (29604) (tgid 29604), adj 1000, [ 972.523071] to free 51608kB on behalf of 'kswapd0' (33) because [ 972.523071] cache 18044kB is below limit 65536kB for oom_score_adj 12 [ 972.523071] Free memory is 38644kB above reserved [ 972.542289] lowmemorykiller: Killing 'syz-executor.3' (29767) (tgid 29767), adj 1000, [ 972.542289] to free 51608kB on behalf of 'kswapd0' (33) because [ 972.542289] cache 18092kB is below limit 65536kB for oom_score_adj 12 [ 972.542289] Free memory is 59068kB above reserved [ 972.718879] input: syz1 as /devices/virtual/input/input4867 [ 972.770211] input: syz1 as /devices/virtual/input/input4868 [ 972.850487] input: syz1 as /devices/virtual/input/input4869 [ 972.946824] input: syz1 as /devices/virtual/input/input4870 [ 973.003105] input: syz1 as /devices/virtual/input/input4871 [ 973.032072] input: syz1 as /devices/virtual/input/input4872 [ 973.289733] input: syz1 as /devices/virtual/input/input4873 [ 973.378244] input: syz1 as /devices/virtual/input/input4875 [ 973.379754] input: syz1 as /devices/virtual/input/input4874 [ 973.455158] input: syz1 as /devices/virtual/input/input4876 [ 973.472171] lowmemorykiller: Killing 'syz-executor.5' (13178) (tgid 13178), adj 1000, [ 973.472171] to free 52272kB on behalf of 'kswapd0' (33) because [ 973.472171] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 973.472171] Free memory is -6744kB above reserved [ 973.473700] lowmemorykiller: Killing 'syz-executor.0' (13207) (tgid 13207), adj 1000, [ 973.473700] to free 52260kB on behalf of 'kswapd0' (33) because [ 973.473700] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 973.473700] Free memory is -6744kB above reserved [ 973.500973] lowmemorykiller: Killing 'syz-executor.3' (13249) (tgid 13249), adj 1000, [ 973.500973] to free 52252kB on behalf of 'kswapd0' (33) because [ 973.500973] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 973.500973] Free memory is -3644kB above reserved [ 973.533082] lowmemorykiller: Killing 'syz-executor.0' (13162) (tgid 13162), adj 1000, [ 973.533082] to free 52248kB on behalf of 'kswapd0' (33) because [ 973.533082] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 973.533082] Free memory is 32644kB above reserved [ 973.553745] lowmemorykiller: Killing 'syz-executor.3' (13195) (tgid 13195), adj 1000, [ 973.553745] to free 52248kB on behalf of 'kswapd0' (33) because [ 973.553745] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 973.553745] Free memory is 40960kB above reserved [ 973.588324] lowmemorykiller: Killing 'syz-executor.5' (13236) (tgid 13236), adj 1000, [ 973.588324] to free 52248kB on behalf of 'kswapd0' (33) because [ 973.588324] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 973.588324] Free memory is 44368kB above reserved [ 973.755543] input: syz1 as /devices/virtual/input/input4877 [ 973.779562] input: syz1 as /devices/virtual/input/input4878 [ 973.843943] input: syz1 as /devices/virtual/input/input4879 [ 974.056937] input: syz1 as /devices/virtual/input/input4880 [ 974.078664] input: syz1 as /devices/virtual/input/input4881 [ 974.084085] input: syz1 as /devices/virtual/input/input4882 [ 974.198761] lowmemorykiller: Killing 'syz-executor.0' (13263) (tgid 13263), adj 1000, [ 974.198761] to free 52260kB on behalf of 'kswapd0' (33) because [ 974.198761] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 974.198761] Free memory is -6708kB above reserved [ 974.200372] lowmemorykiller: Killing 'syz-executor.3' (13295) (tgid 13295), adj 1000, [ 974.200372] to free 52252kB on behalf of 'kswapd0' (33) because [ 974.200372] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 974.200372] Free memory is -6708kB above reserved [ 974.236768] lowmemorykiller: Killing 'syz-executor.5' (13280) (tgid 13280), adj 1000, [ 974.236768] to free 52248kB on behalf of 'kswapd0' (33) because [ 974.236768] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 974.236768] Free memory is 3592kB above reserved [ 974.256835] lowmemorykiller: Killing 'syz-executor.0' (13316) (tgid 13316), adj 1000, [ 974.256835] to free 52248kB on behalf of 'kswapd0' (33) because [ 974.256835] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 974.256835] Free memory is 23696kB above reserved [ 974.274610] lowmemorykiller: Killing 'syz-executor.1' (13189) (tgid 13189), adj 1000, [ 974.274610] to free 52240kB on behalf of 'kswapd0' (33) because [ 974.274610] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 974.274610] Free memory is 40356kB above reserved [ 974.386220] input: syz1 as /devices/virtual/input/input4883 [ 974.506061] input: syz1 as /devices/virtual/input/input4884 [ 974.666633] input: syz1 as /devices/virtual/input/input4885 [ 974.681750] input: syz1 as /devices/virtual/input/input4886 [ 974.752579] input: syz1 as /devices/virtual/input/input4887 [ 974.835962] lowmemorykiller: Killing 'syz-executor.0' (13361) (tgid 13361), adj 1000, [ 974.835962] to free 52256kB on behalf of 'kswapd0' (33) because [ 974.835962] cache 17888kB is below limit 65536kB for oom_score_adj 12 [ 974.835962] Free memory is -6892kB above reserved [ 974.838547] lowmemorykiller: Killing 'syz-executor.3' (13323) (tgid 13323), adj 1000, [ 974.838547] to free 52248kB on behalf of 'kswapd0' (33) because [ 974.838547] cache 17888kB is below limit 65536kB for oom_score_adj 12 [ 974.838547] Free memory is -7140kB above reserved [ 974.847232] lowmemorykiller: Killing 'syz-executor.5' (13350) (tgid 13350), adj 1000, [ 974.847232] to free 52248kB on behalf of 'kswapd0' (33) because [ 974.847232] cache 17888kB is below limit 65536kB for oom_score_adj 12 [ 974.847232] Free memory is -5540kB above reserved [ 974.867960] lowmemorykiller: Killing 'syz-executor.1' (13225) (tgid 13225), adj 1000, [ 974.867960] to free 52240kB on behalf of 'kswapd0' (33) because [ 974.867960] cache 17888kB is below limit 65536kB for oom_score_adj 12 [ 974.867960] Free memory is 14348kB above reserved [ 974.901728] lowmemorykiller: Killing 'syz-executor.1' (13278) (tgid 13278), adj 1000, [ 974.901728] to free 52240kB on behalf of 'kswapd0' (33) because [ 974.901728] cache 18136kB is below limit 65536kB for oom_score_adj 12 [ 974.901728] Free memory is 37932kB above reserved [ 974.918729] lowmemorykiller: Killing 'syz-executor.3' (13371) (tgid 13371), adj 1000, [ 974.918729] to free 52252kB on behalf of 'kswapd0' (33) because [ 974.918729] cache 18136kB is below limit 65536kB for oom_score_adj 12 [ 974.918729] Free memory is 60804kB above reserved [ 974.946728] lowmemorykiller: Killing 'syz-executor.1' (13347) (tgid 13347), adj 1000, [ 974.946728] to free 52240kB on behalf of 'kswapd0' (33) because [ 974.946728] cache 18136kB is below limit 65536kB for oom_score_adj 12 [ 974.946728] Free memory is 64244kB above reserved [ 975.049693] input: syz1 as /devices/virtual/input/input4888 [ 975.150800] input: syz1 as /devices/virtual/input/input4889 [ 975.248722] input: syz1 as /devices/virtual/input/input4890 [ 975.301117] input: syz1 as /devices/virtual/input/input4891 [ 975.356271] input: syz1 as /devices/virtual/input/input4892 [ 975.456533] input: syz1 as /devices/virtual/input/input4893 [ 975.635025] lowmemorykiller: Killing 'syz-executor.5' (13419) (tgid 13419), adj 1000, [ 975.635025] to free 52280kB on behalf of 'kswapd0' (33) because [ 975.635025] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 975.635025] Free memory is -6804kB above reserved [ 975.658126] lowmemorykiller: Killing 'syz-executor.1' (13387) (tgid 13387), adj 1000, [ 975.658126] to free 52264kB on behalf of 'kswapd0' (33) because [ 975.658126] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 975.658126] Free memory is -7176kB above reserved [ 975.662796] lowmemorykiller: Killing 'syz-executor.5' (13389) (tgid 13389), adj 1000, [ 975.662796] to free 52248kB on behalf of 'kswapd0' (33) because [ 975.662796] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 975.662796] Free memory is 13528kB above reserved [ 975.670853] lowmemorykiller: Killing 'syz-executor.0' (13399) (tgid 13399), adj 1000, [ 975.670853] to free 52248kB on behalf of 'kswapd0' (33) because [ 975.670853] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 975.670853] Free memory is 15832kB above reserved [ 975.677244] lowmemorykiller: Killing 'syz-executor.3' (13411) (tgid 13411), adj 1000, [ 975.677244] to free 52248kB on behalf of 'kswapd0' (33) because [ 975.677244] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 975.677244] Free memory is 26508kB above reserved [ 975.692648] lowmemorykiller: Killing 'syz-executor.0' (13436) (tgid 13436), adj 1000, [ 975.692648] to free 52244kB on behalf of 'kswapd0' (33) because [ 975.692648] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 975.692648] Free memory is 35536kB above reserved [ 975.702217] lowmemorykiller: Killing 'syz-executor.3' (29921) (tgid 29921), adj 1000, [ 975.702217] to free 51608kB on behalf of 'kswapd0' (33) because [ 975.702217] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 975.702217] Free memory is 56192kB above reserved [ 975.704154] lowmemorykiller: Killing 'syz-executor.3' (30256) (tgid 30256), adj 1000, [ 975.704154] to free 51608kB on behalf of 'kswapd0' (33) because [ 975.704154] cache 17504kB is below limit 65536kB for oom_score_adj 12 [ 975.704154] Free memory is 65236kB above reserved [ 975.763846] input: syz1 as /devices/virtual/input/input4894 [ 975.795034] input: syz1 as /devices/virtual/input/input4895 [ 975.857767] input: syz1 as /devices/virtual/input/input4896 [ 976.060855] input: syz1 as /devices/virtual/input/input4897 [ 976.081353] input: syz1 as /devices/virtual/input/input4898 [ 976.259724] input: syz1 as /devices/virtual/input/input4899 [ 976.288487] input: syz1 as /devices/virtual/input/input4900 [ 976.387902] input: syz1 as /devices/virtual/input/input4901 [ 976.398619] input: syz1 as /devices/virtual/input/input4902 [ 976.494053] input: syz1 as /devices/virtual/input/input4903 [ 976.603774] lowmemorykiller: Killing 'syz-executor.0' (13474) (tgid 13474), adj 1000, [ 976.603774] to free 52256kB on behalf of 'kswapd0' (33) because [ 976.603774] cache 17588kB is below limit 65536kB for oom_score_adj 12 [ 976.603774] Free memory is -6812kB above reserved [ 976.617242] lowmemorykiller: Killing 'syz-executor.3' (13502) (tgid 13502), adj 1000, [ 976.617242] to free 52252kB on behalf of 'kswapd0' (33) because [ 976.617242] cache 17588kB is below limit 65536kB for oom_score_adj 12 [ 976.617242] Free memory is -7184kB above reserved [ 976.629772] lowmemorykiller: Killing 'syz-executor.3' (13459) (tgid 13459), adj 1000, [ 976.629772] to free 52248kB on behalf of 'kswapd0' (33) because [ 976.629772] cache 17588kB is below limit 65536kB for oom_score_adj 12 [ 976.629772] Free memory is 6452kB above reserved [ 976.637913] lowmemorykiller: Killing 'syz-executor.5' (13479) (tgid 13479), adj 1000, [ 976.637913] to free 52248kB on behalf of 'kswapd0' (33) because [ 976.637913] cache 17588kB is below limit 65536kB for oom_score_adj 12 [ 976.637913] Free memory is 29200kB above reserved [ 976.658856] lowmemorykiller: Killing 'syz-executor.1' (13447) (tgid 13447), adj 1000, [ 976.658856] to free 52240kB on behalf of 'kswapd0' (33) because [ 976.658856] cache 17588kB is below limit 65536kB for oom_score_adj 12 [ 976.658856] Free memory is 29588kB above reserved [ 976.668784] lowmemorykiller: Killing 'syz-executor.1' (13506) (tgid 13506), adj 1000, [ 976.668784] to free 52228kB on behalf of 'kswapd0' (33) because [ 976.668784] cache 17588kB is below limit 65536kB for oom_score_adj 12 [ 976.668784] Free memory is 55704kB above reserved [ 976.687666] lowmemorykiller: Killing 'syz-executor.3' (30591) (tgid 30591), adj 1000, [ 976.687666] to free 51608kB on behalf of 'kswapd0' (33) because [ 976.687666] cache 17588kB is below limit 65536kB for oom_score_adj 12 [ 976.687666] Free memory is 60436kB above reserved [ 977.053683] input: syz1 as /devices/virtual/input/input4904 [ 977.096820] input: syz1 as /devices/virtual/input/input4905 [ 977.097466] input: syz1 as /devices/virtual/input/input4906 [ 977.103668] input: syz1 as /devices/virtual/input/input4907 [ 977.525001] input: syz1 as /devices/virtual/input/input4908 [ 977.574022] input: syz1 as /devices/virtual/input/input4909 [ 977.620144] input: syz1 as /devices/virtual/input/input4910 [ 977.631917] input: syz1 as /devices/virtual/input/input4911 [ 977.648430] input: syz1 as /devices/virtual/input/input4912 [ 977.760801] input: syz1 as /devices/virtual/input/input4913 [ 977.793223] lowmemorykiller: Killing 'syz-executor.4' (13487) (tgid 13487), adj 1000, [ 977.793223] to free 52300kB on behalf of 'kswapd0' (33) because [ 977.793223] cache 17628kB is below limit 65536kB for oom_score_adj 12 [ 977.793223] Free memory is -6788kB above reserved [ 977.794799] lowmemorykiller: Killing 'syz-executor.2' (13539) (tgid 13539), adj 1000, [ 977.794799] to free 52296kB on behalf of 'kswapd0' (33) because [ 977.794799] cache 17628kB is below limit 65536kB for oom_score_adj 12 [ 977.794799] Free memory is -7004kB above reserved [ 977.817329] lowmemorykiller: Killing 'syz-executor.1' (13577) (tgid 13577), adj 1000, [ 977.817329] to free 52264kB on behalf of 'kswapd0' (33) because [ 977.817329] cache 17628kB is below limit 65536kB for oom_score_adj 12 [ 977.817329] Free memory is -7376kB above reserved [ 977.826475] lowmemorykiller: Killing 'syz-executor.0' (13522) (tgid 13522), adj 1000, [ 977.826475] to free 52256kB on behalf of 'kswapd0' (33) because [ 977.826475] cache 17628kB is below limit 65536kB for oom_score_adj 12 [ 977.826475] Free memory is 12112kB above reserved [ 977.836480] lowmemorykiller: Killing 'syz-executor.3' (13585) (tgid 13585), adj 1000, [ 977.836480] to free 52252kB on behalf of 'kswapd0' (33) because [ 977.836480] cache 17628kB is below limit 65536kB for oom_score_adj 12 [ 977.836480] Free memory is 19000kB above reserved [ 977.846498] lowmemorykiller: Killing 'syz-executor.5' (13525) (tgid 13525), adj 1000, [ 977.846498] to free 52248kB on behalf of 'kswapd0' (33) because [ 977.846498] cache 17628kB is below limit 65536kB for oom_score_adj 12 [ 977.846498] Free memory is 29664kB above reserved [ 977.856536] lowmemorykiller: Killing 'syz-executor.3' (13543) (tgid 13543), adj 1000, [ 977.856536] to free 52248kB on behalf of 'kswapd0' (33) because [ 977.856536] cache 17628kB is below limit 65536kB for oom_score_adj 12 [ 977.856536] Free memory is 40452kB above reserved [ 977.858612] lowmemorykiller: Killing 'syz-executor.0' (13578) (tgid 13578), adj 1000, [ 977.858612] to free 52248kB on behalf of 'kswapd0' (33) because [ 977.858612] cache 17628kB is below limit 65536kB for oom_score_adj 12 [ 977.858612] Free memory is 50840kB above reserved [ 977.860474] lowmemorykiller: Killing 'syz-executor.5' (13587) (tgid 13587), adj 1000, [ 977.860474] to free 52248kB on behalf of 'kswapd0' (33) because [ 977.860474] cache 17628kB is below limit 65536kB for oom_score_adj 12 [ 977.860474] Free memory is 50716kB above reserved [ 978.204287] input: syz1 as /devices/virtual/input/input4914 [ 978.300221] input: syz1 as /devices/virtual/input/input4915 [ 978.301285] input: syz1 as /devices/virtual/input/input4916 [ 978.331970] input: syz1 as /devices/virtual/input/input4917 [ 978.519618] input: syz1 as /devices/virtual/input/input4918 [ 978.829212] lowmemorykiller: Killing 'syz-executor.2' (13608) (tgid 13608), adj 1000, [ 978.829212] to free 52328kB on behalf of 'kswapd0' (33) because [ 978.829212] cache 17836kB is below limit 65536kB for oom_score_adj 12 [ 978.829212] Free memory is -6112kB above reserved [ 978.836389] lowmemorykiller: Killing 'syz-executor.3' (13666) (tgid 13666), adj 1000, [ 978.836389] to free 52268kB on behalf of 'kswapd0' (33) because [ 978.836389] cache 17836kB is below limit 65536kB for oom_score_adj 12 [ 978.836389] Free memory is -6112kB above reserved [ 978.846422] lowmemorykiller: Killing 'syz-executor.1' (13708) (tgid 13708), adj 1000, [ 978.846422] to free 52264kB on behalf of 'kswapd0' (33) because [ 978.846422] cache 17836kB is below limit 65536kB for oom_score_adj 12 [ 978.846422] Free memory is 292kB above reserved [ 978.848093] lowmemorykiller: Killing 'syz-executor.3' (13636) (tgid 13636), adj 1000, [ 978.848093] to free 52252kB on behalf of 'kswapd0' (33) because [ 978.848093] cache 17836kB is below limit 65536kB for oom_score_adj 12 [ 978.848093] Free memory is 12796kB above reserved [ 978.856366] lowmemorykiller: Killing 'syz-executor.5' (13625) (tgid 13625), adj 1000, [ 978.856366] to free 52248kB on behalf of 'kswapd0' (33) because [ 978.856366] cache 17836kB is below limit 65536kB for oom_score_adj 12 [ 978.856366] Free memory is 12796kB above reserved [ 978.866351] lowmemorykiller: Killing 'syz-executor.0' (13633) (tgid 13633), adj 1000, [ 978.866351] to free 52248kB on behalf of 'kswapd0' (33) because [ 978.866351] cache 17836kB is below limit 65536kB for oom_score_adj 12 [ 978.866351] Free memory is 35396kB above reserved [ 978.876348] lowmemorykiller: Killing 'syz-executor.5' (13680) (tgid 13680), adj 1000, [ 978.876348] to free 52244kB on behalf of 'kswapd0' (33) because [ 978.876348] cache 17836kB is below limit 65536kB for oom_score_adj 12 [ 978.876348] Free memory is 47596kB above reserved [ 978.878077] lowmemorykiller: Killing 'syz-executor.1' (13553) (tgid 13553), adj 1000, [ 978.878077] to free 52240kB on behalf of 'kswapd0' (33) because [ 978.878077] cache 17836kB is below limit 65536kB for oom_score_adj 12 [ 978.878077] Free memory is 61236kB above reserved [ 978.879646] lowmemorykiller: Killing 'syz-executor.1' (13649) (tgid 13649), adj 1000, [ 978.879646] to free 52240kB on behalf of 'kswapd0' (33) because [ 978.879646] cache 17836kB is below limit 65536kB for oom_score_adj 12 [ 978.879646] Free memory is 61080kB above reserved [ 978.928379] input: syz1 as /devices/virtual/input/input4919 [ 978.945648] input: syz1 as /devices/virtual/input/input4920 [ 979.016926] input: syz1 as /devices/virtual/input/input4921 [ 979.101640] input: syz1 as /devices/virtual/input/input4922 [ 979.252997] input: syz1 as /devices/virtual/input/input4923 [ 979.333343] input: syz1 as /devices/virtual/input/input4924 [ 979.351797] input: syz1 as /devices/virtual/input/input4925 [ 979.715741] input: syz1 as /devices/virtual/input/input4926 [ 979.717809] input: syz1 as /devices/virtual/input/input4927 [ 979.746055] input: syz1 as /devices/virtual/input/input4928 [ 979.782275] input: syz1 as /devices/virtual/input/input4929 [ 979.834962] input: syz1 as /devices/virtual/input/input4930 [ 979.930535] lowmemorykiller: Killing 'syz-executor.1' (13774) (tgid 13774), adj 1000, [ 979.930535] to free 52292kB on behalf of 'kswapd0' (33) because [ 979.930535] cache 18348kB is below limit 65536kB for oom_score_adj 12 [ 979.930535] Free memory is -6696kB above reserved [ 979.982983] lowmemorykiller: Killing 'syz-executor.3' (13734) (tgid 13734), adj 1000, [ 979.982983] to free 52276kB on behalf of 'kswapd0' (33) because [ 979.982983] cache 18348kB is below limit 65536kB for oom_score_adj 12 [ 979.982983] Free memory is -7812kB above reserved [ 979.998280] lowmemorykiller: Killing 'syz-executor.3' (13777) (tgid 13777), adj 1000, [ 979.998280] to free 52252kB on behalf of 'kswapd0' (33) because [ 979.998280] cache 18348kB is below limit 65536kB for oom_score_adj 12 [ 979.998280] Free memory is 8640kB above reserved [ 980.000720] lowmemorykiller: Killing 'syz-executor.0' (13755) (tgid 13755), adj 1000, [ 980.000720] to free 52248kB on behalf of 'kswapd0' (33) because [ 980.000720] cache 18348kB is below limit 65536kB for oom_score_adj 12 [ 980.000720] Free memory is 5736kB above reserved [ 980.026359] lowmemorykiller: Killing 'syz-executor.0' (13688) (tgid 13688), adj 1000, [ 980.026359] to free 52244kB on behalf of 'kswapd0' (33) because [ 980.026359] cache 18348kB is below limit 65536kB for oom_score_adj 12 [ 980.026359] Free memory is 7136kB above reserved [ 980.063503] lowmemorykiller: Killing 'syz-executor.5' (13747) (tgid 13747), adj 1000, [ 980.063503] to free 52244kB on behalf of 'kswapd0' (33) because [ 980.063503] cache 18348kB is below limit 65536kB for oom_score_adj 12 [ 980.063503] Free memory is 36612kB above reserved [ 980.122164] input: syz1 as /devices/virtual/input/input4931 [ 980.163680] input: syz1 as /devices/virtual/input/input4932 [ 980.197816] input: syz1 as /devices/virtual/input/input4933 [ 980.409408] input: syz1 as /devices/virtual/input/input4934 [ 980.422708] input: syz1 as /devices/virtual/input/input4935 [ 980.553172] input: syz1 as /devices/virtual/input/input4936 [ 980.585622] lowmemorykiller: Killing 'syz-executor.5' (13811) (tgid 13811), adj 1000, [ 980.585622] to free 52272kB on behalf of 'kswapd0' (33) because [ 980.585622] cache 17808kB is below limit 65536kB for oom_score_adj 12 [ 980.585622] Free memory is -5560kB above reserved [ 980.596459] lowmemorykiller: Killing 'syz-executor.5' (13811) (tgid 13811), adj 1000, [ 980.596459] to free 52272kB on behalf of 'syz-executor.0' (2071) because [ 980.596459] cache 17808kB is below limit 65536kB for oom_score_adj 12 [ 980.596459] Free memory is -5560kB above reserved [ 980.597089] lowmemorykiller: Killing 'syz-executor.0' (13812) (tgid 13812), adj 1000, [ 980.597089] to free 52248kB on behalf of 'kswapd0' (33) because [ 980.597089] cache 17808kB is below limit 65536kB for oom_score_adj 12 [ 980.597089] Free memory is -5560kB above reserved [ 980.598257] lowmemorykiller: Killing 'syz-executor.0' (13846) (tgid 13846), adj 1000, [ 980.598257] to free 52248kB on behalf of 'syz-executor.0' (2071) because [ 980.598257] cache 17808kB is below limit 65536kB for oom_score_adj 12 [ 980.598257] Free memory is 18740kB above reserved [ 980.606498] lowmemorykiller: Killing 'syz-executor.5' (13852) (tgid 13852), adj 1000, [ 980.606498] to free 52248kB on behalf of 'syz-executor.0' (2071) because [ 980.606498] cache 17808kB is below limit 65536kB for oom_score_adj 12 [ 980.606498] Free memory is 18740kB above reserved [ 980.617206] lowmemorykiller: Killing 'syz-executor.3' (13810) (tgid 13810), adj 1000, [ 980.617206] to free 52244kB on behalf of 'kswapd0' (33) because [ 980.617206] cache 17808kB is below limit 65536kB for oom_score_adj 12 [ 980.617206] Free memory is 18740kB above reserved [ 980.623050] lowmemorykiller: Killing 'syz-executor.1' (13831) (tgid 13831), adj 1000, [ 980.623050] to free 52240kB on behalf of 'syz-executor.0' (2071) because [ 980.623050] cache 17808kB is below limit 65536kB for oom_score_adj 12 [ 980.623050] Free memory is 40440kB above reserved [ 980.627193] lowmemorykiller: Killing 'syz-executor.1' (13740) (tgid 13740), adj 1000, [ 980.627193] to free 52240kB on behalf of 'kswapd0' (33) because [ 980.627193] cache 17808kB is below limit 65536kB for oom_score_adj 12 [ 980.627193] Free memory is 54940kB above reserved [ 980.653495] lowmemorykiller: Killing 'syz-executor.3' (30670) (tgid 30670), adj 1000, [ 980.653495] to free 51608kB on behalf of 'kswapd0' (33) because [ 980.653495] cache 17808kB is below limit 65536kB for oom_score_adj 12 [ 980.653495] Free memory is 62336kB above reserved [ 980.656434] lowmemorykiller: Killing 'syz-executor.3' (30670) (tgid 30670), adj 1000, [ 980.656434] to free 51608kB on behalf of 'syz-executor.0' (2071) because [ 980.656434] cache 17808kB is below limit 65536kB for oom_score_adj 12 [ 980.656434] Free memory is 58360kB above reserved [ 980.754968] input: syz1 as /devices/virtual/input/input4937 [ 980.879946] input: syz1 as /devices/virtual/input/input4938 [ 980.930875] input: syz1 as /devices/virtual/input/input4939 [ 981.109873] input: syz1 as /devices/virtual/input/input4940 [ 981.205789] input: syz1 as /devices/virtual/input/input4941 [ 981.366516] input: syz1 as /devices/virtual/input/input4942 [ 981.380152] input: syz1 as /devices/virtual/input/input4943 [ 981.451628] input: syz1 as /devices/virtual/input/input4944 [ 981.492671] input: syz1 as /devices/virtual/input/input4945 [ 981.549368] input: syz1 as /devices/virtual/input/input4946 [ 981.603606] input: syz1 as /devices/virtual/input/input4947 [ 981.669542] lowmemorykiller: Killing 'syz-executor.1' (13901) (tgid 13901), adj 1000, [ 981.669542] to free 52268kB on behalf of 'syz-executor.5' (13963) because [ 981.669542] cache 17592kB is below limit 65536kB for oom_score_adj 12 [ 981.669542] Free memory is -6392kB above reserved [ 981.676768] lowmemorykiller: Killing 'syz-executor.3' (13874) (tgid 13874), adj 1000, [ 981.676768] to free 52252kB on behalf of 'syz-executor.5' (13963) because [ 981.676768] cache 17592kB is below limit 65536kB for oom_score_adj 12 [ 981.676768] Free memory is -6764kB above reserved [ 981.692266] lowmemorykiller: Killing 'syz-executor.3' (13914) (tgid 13914), adj 1000, [ 981.692266] to free 52252kB on behalf of 'syz-executor.5' (13963) because [ 981.692266] cache 17592kB is below limit 65536kB for oom_score_adj 12 [ 981.692266] Free memory is 9736kB above reserved [ 981.719290] lowmemorykiller: Killing 'syz-executor.5' (13884) (tgid 13884), adj 1000, [ 981.719290] to free 52248kB on behalf of 'syz-executor.5' (13963) because [ 981.719290] cache 17592kB is below limit 65536kB for oom_score_adj 12 [ 981.719290] Free memory is 25704kB above reserved [ 981.745780] lowmemorykiller: Killing 'syz-executor.0' (13893) (tgid 13893), adj 1000, [ 981.745780] to free 52248kB on behalf of 'syz-executor.5' (13963) because [ 981.745780] cache 17592kB is below limit 65536kB for oom_score_adj 12 [ 981.745780] Free memory is 38744kB above reserved [ 981.769944] lowmemorykiller: Killing 'syz-executor.5' (13933) (tgid 13933), adj 1000, [ 981.769944] to free 52248kB on behalf of 'syz-executor.5' (13963) because [ 981.769944] cache 17592kB is below limit 65536kB for oom_score_adj 12 [ 981.769944] Free memory is 52680kB above reserved [ 981.800639] lowmemorykiller: Killing 'syz-executor.0' (13944) (tgid 13944), adj 1000, [ 981.800639] to free 52244kB on behalf of 'syz-executor.5' (13963) because [ 981.800639] cache 17592kB is below limit 65536kB for oom_score_adj 12 [ 981.800639] Free memory is 56220kB above reserved [ 981.984099] input: syz1 as /devices/virtual/input/input4948 [ 981.997435] input: syz1 as /devices/virtual/input/input4949 [ 982.162829] input: syz1 as /devices/virtual/input/input4950 [ 982.280832] input: syz1 as /devices/virtual/input/input4951 [ 982.347487] input: syz1 as /devices/virtual/input/input4952 [ 982.406358] lowmemorykiller: Killing 'syz-executor.3' (13979) (tgid 13979), adj 1000, [ 982.406358] to free 52252kB on behalf of 'kswapd0' (33) because [ 982.406358] cache 17392kB is below limit 65536kB for oom_score_adj 12 [ 982.406358] Free memory is -6796kB above reserved [ 982.408183] lowmemorykiller: Killing 'syz-executor.3' (14002) (tgid 14002), adj 1000, [ 982.408183] to free 52252kB on behalf of 'kswapd0' (33) because [ 982.408183] cache 17392kB is below limit 65536kB for oom_score_adj 12 [ 982.408183] Free memory is 4752kB above reserved [ 982.409773] lowmemorykiller: Killing 'syz-executor.5' (13970) (tgid 13970), adj 1000, [ 982.409773] to free 52248kB on behalf of 'kswapd0' (33) because [ 982.409773] cache 17392kB is below limit 65536kB for oom_score_adj 12 [ 982.409773] Free memory is 4628kB above reserved [ 982.436371] lowmemorykiller: Killing 'syz-executor.0' (13985) (tgid 13985), adj 1000, [ 982.436371] to free 52248kB on behalf of 'kswapd0' (33) because [ 982.436371] cache 17392kB is below limit 65536kB for oom_score_adj 12 [ 982.436371] Free memory is 15628kB above reserved [ 982.446680] lowmemorykiller: Killing 'syz-executor.1' (13870) (tgid 13870), adj 1000, [ 982.446680] to free 52240kB on behalf of 'kswapd0' (33) because [ 982.446680] cache 17392kB is below limit 65536kB for oom_score_adj 12 [ 982.446680] Free memory is 45948kB above reserved [ 982.475787] input: syz1 as /devices/virtual/input/input4953 [ 982.512644] input: syz1 as /devices/virtual/input/input4954 [ 982.651685] input: syz1 as /devices/virtual/input/input4955 [ 982.844630] input: syz1 as /devices/virtual/input/input4956 [ 983.022895] input: syz1 as /devices/virtual/input/input4957 [ 983.078874] input: syz1 as /devices/virtual/input/input4958 [ 983.114641] lowmemorykiller: Killing 'syz-executor.3' (14052) (tgid 14052), adj 1000, [ 983.114641] to free 52284kB on behalf of 'kswapd0' (33) because [ 983.114641] cache 17456kB is below limit 65536kB for oom_score_adj 12 [ 983.114641] Free memory is -6724kB above reserved [ 983.136868] lowmemorykiller: Killing 'syz-executor.0' (14016) (tgid 14016), adj 1000, [ 983.136868] to free 52264kB on behalf of 'kswapd0' (33) because [ 983.136868] cache 17456kB is below limit 65536kB for oom_score_adj 12 [ 983.136868] Free memory is -7072kB above reserved [ 983.153166] lowmemorykiller: Killing 'syz-executor.0' (14063) (tgid 14063), adj 1000, [ 983.153166] to free 52248kB on behalf of 'kswapd0' (33) because [ 983.153166] cache 17456kB is below limit 65536kB for oom_score_adj 12 [ 983.153166] Free memory is 16916kB above reserved [ 983.176486] lowmemorykiller: Killing 'syz-executor.1' (13966) (tgid 13966), adj 1000, [ 983.176486] to free 52240kB on behalf of 'kswapd0' (33) because [ 983.176486] cache 17456kB is below limit 65536kB for oom_score_adj 12 [ 983.176486] Free memory is 26380kB above reserved [ 983.183569] input: syz1 as /devices/virtual/input/input4959 [ 983.186384] lowmemorykiller: Killing 'syz-executor.1' (14005) (tgid 14005), adj 1000, [ 983.186384] to free 52240kB on behalf of 'kswapd0' (33) because [ 983.186384] cache 17700kB is below limit 65536kB for oom_score_adj 12 [ 983.186384] Free memory is 51288kB above reserved [ 983.188175] lowmemorykiller: Killing 'syz-executor.5' (14026) (tgid 14026), adj 1000, [ 983.188175] to free 52236kB on behalf of 'kswapd0' (33) because [ 983.188175] cache 17700kB is below limit 65536kB for oom_score_adj 12 [ 983.188175] Free memory is 62640kB above reserved [ 983.233675] lowmemorykiller: Killing 'syz-executor.1' (14051) (tgid 14051), adj 1000, [ 983.233675] to free 52236kB on behalf of 'kswapd0' (33) because [ 983.233675] cache 17700kB is below limit 65536kB for oom_score_adj 12 [ 983.233675] Free memory is 62640kB above reserved [ 983.318069] input: syz1 as /devices/virtual/input/input4960 [ 983.564339] input: syz1 as /devices/virtual/input/input4961 [ 983.567212] input: syz1 as /devices/virtual/input/input4962 [ 983.624982] input: syz1 as /devices/virtual/input/input4963 [ 983.672352] input: syz1 as /devices/virtual/input/input4964 [ 983.944432] input: syz1 as /devices/virtual/input/input4965 [ 983.993992] lowmemorykiller: Killing 'syz-executor.0' (14113) (tgid 14113), adj 1000, [ 983.993992] to free 52280kB on behalf of 'kswapd0' (33) because [ 983.993992] cache 17416kB is below limit 65536kB for oom_score_adj 12 [ 983.993992] Free memory is -6792kB above reserved [ 983.997838] lowmemorykiller: Killing 'syz-executor.3' (14107) (tgid 14107), adj 1000, [ 983.997838] to free 52252kB on behalf of 'syz-executor.3' (14166) because [ 983.997838] cache 17416kB is below limit 65536kB for oom_score_adj 12 [ 983.997838] Free memory is -6116kB above reserved [ 984.013889] lowmemorykiller: Killing 'syz-executor.1' (14096) (tgid 14096), adj 1000, [ 984.013889] to free 52264kB on behalf of 'kswapd0' (33) because [ 984.013889] cache 17416kB is below limit 65536kB for oom_score_adj 12 [ 984.013889] Free memory is -6916kB above reserved [ 984.026847] lowmemorykiller: Killing 'syz-executor.5' (14139) (tgid 14139), adj 1000, [ 984.026847] to free 52248kB on behalf of 'kswapd0' (33) because [ 984.026847] cache 17416kB is below limit 65536kB for oom_score_adj 12 [ 984.026847] Free memory is 21084kB above reserved [ 984.029580] lowmemorykiller: Killing 'syz-executor.5' (14080) (tgid 14080), adj 1000, [ 984.029580] to free 52244kB on behalf of 'kswapd0' (33) because [ 984.029580] cache 17416kB is below limit 65536kB for oom_score_adj 12 [ 984.029580] Free memory is 51936kB above reserved [ 984.036690] lowmemorykiller: Killing 'syz-executor.3' (30799) (tgid 30799), adj 1000, [ 984.036690] to free 51608kB on behalf of 'kswapd0' (33) because [ 984.036690] cache 17416kB is below limit 65536kB for oom_score_adj 12 [ 984.036690] Free memory is 51664kB above reserved [ 984.046561] lowmemorykiller: Killing 'syz-executor.3' (30934) (tgid 30934), adj 1000, [ 984.046561] to free 51608kB on behalf of 'kswapd0' (33) because [ 984.046561] cache 17416kB is below limit 65536kB for oom_score_adj 12 [ 984.046561] Free memory is 65164kB above reserved [ 984.060174] lowmemorykiller: Killing 'syz-executor.3' (30799) (tgid 30799), adj 1000, [ 984.060174] to free 51608kB on behalf of 'syz-executor.3' (14166) because [ 984.060174] cache 17416kB is below limit 65536kB for oom_score_adj 12 [ 984.060174] Free memory is 4984kB above reserved [ 984.120285] input: syz1 as /devices/virtual/input/input4966 [ 984.224509] input: syz1 as /devices/virtual/input/input4967 [ 984.233530] input: syz1 as /devices/virtual/input/input4968 [ 984.437747] input: syz1 as /devices/virtual/input/input4969 [ 984.582587] input: syz1 as /devices/virtual/input/input4970 [ 984.591568] input: syz1 as /devices/virtual/input/input4971 [ 984.769572] input: syz1 as /devices/virtual/input/input4972 [ 984.893965] lowmemorykiller: Killing 'syz-executor.3' (14220) (tgid 14220), adj 1000, [ 984.893965] to free 52316kB on behalf of 'kswapd0' (33) because [ 984.893965] cache 17368kB is below limit 65536kB for oom_score_adj 12 [ 984.893965] Free memory is -8804kB above reserved [ 984.897474] lowmemorykiller: Killing 'syz-executor.3' (14172) (tgid 14172), adj 1000, [ 984.897474] to free 52252kB on behalf of 'syz-executor.1' (14252) because [ 984.897474] cache 17368kB is below limit 65536kB for oom_score_adj 12 [ 984.897474] Free memory is -7828kB above reserved [ 984.898724] lowmemorykiller: Killing 'syz-executor.5' (14181) (tgid 14181), adj 1000, [ 984.898724] to free 52248kB on behalf of 'syz-executor.1' (14252) because [ 984.898724] cache 17368kB is below limit 65536kB for oom_score_adj 12 [ 984.898724] Free memory is -7228kB above reserved [ 984.906476] lowmemorykiller: Killing 'syz-executor.0' (14196) (tgid 14196), adj 1000, [ 984.906476] to free 52248kB on behalf of 'kswapd0' (33) because [ 984.906476] cache 17368kB is below limit 65536kB for oom_score_adj 12 [ 984.906476] Free memory is -8928kB above reserved [ 984.946967] lowmemorykiller: Killing 'syz-executor.1' (14152) (tgid 14152), adj 1000, [ 984.946967] to free 52240kB on behalf of 'syz-executor.1' (14252) because [ 984.946967] cache 17368kB is below limit 65536kB for oom_score_adj 12 [ 984.946967] Free memory is 4172kB above reserved [ 984.956761] lowmemorykiller: Killing 'syz-executor.1' (14197) (tgid 14197), adj 1000, [ 984.956761] to free 52240kB on behalf of 'syz-executor.1' (14252) because [ 984.956761] cache 17368kB is below limit 65536kB for oom_score_adj 12 [ 984.956761] Free memory is 55524kB above reserved [ 984.979301] input: syz1 as /devices/virtual/input/input4973 [ 985.051581] input: syz1 as /devices/virtual/input/input4974 [ 985.284507] input: syz1 as /devices/virtual/input/input4975 [ 985.332735] input: syz1 as /devices/virtual/input/input4976 [ 985.434766] input: syz1 as /devices/virtual/input/input4977 [ 985.486016] input: syz1 as /devices/virtual/input/input4978 [ 985.534105] input: syz1 as /devices/virtual/input/input4979 [ 985.643874] lowmemorykiller: Killing 'syz-executor.5' (14235) (tgid 14235), adj 1000, [ 985.643874] to free 52264kB on behalf of 'kswapd0' (33) because [ 985.643874] cache 17604kB is below limit 65536kB for oom_score_adj 12 [ 985.643874] Free memory is -6724kB above reserved [ 985.656403] lowmemorykiller: Killing 'syz-executor.0' (14250) (tgid 14250), adj 1000, [ 985.656403] to free 52256kB on behalf of 'kswapd0' (33) because [ 985.656403] cache 17604kB is below limit 65536kB for oom_score_adj 12 [ 985.656403] Free memory is -6848kB above reserved [ 985.666402] lowmemorykiller: Killing 'syz-executor.3' (14265) (tgid 14265), adj 1000, [ 985.666402] to free 52248kB on behalf of 'kswapd0' (33) because [ 985.666402] cache 17604kB is below limit 65536kB for oom_score_adj 12 [ 985.666402] Free memory is 17752kB above reserved [ 985.668213] lowmemorykiller: Killing 'syz-executor.1' (14269) (tgid 14269), adj 1000, [ 985.668213] to free 52240kB on behalf of 'kswapd0' (33) because [ 985.668213] cache 17604kB is below limit 65536kB for oom_score_adj 12 [ 985.668213] Free memory is 31952kB above reserved [ 985.669784] lowmemorykiller: Killing 'syz-executor.0' (14159) (tgid 14159), adj 1000, [ 985.669784] to free 52236kB on behalf of 'kswapd0' (33) because [ 985.669784] cache 17604kB is below limit 65536kB for oom_score_adj 12 [ 985.669784] Free memory is 31952kB above reserved [ 985.720640] lowmemorykiller: Killing 'syz-executor.5' (14274) (tgid 14274), adj 1000, [ 985.720640] to free 52264kB on behalf of 'kswapd0' (33) because [ 985.720640] cache 17604kB is below limit 65536kB for oom_score_adj 12 [ 985.720640] Free memory is 41252kB above reserved [ 985.936525] input: syz1 as /devices/virtual/input/input4980 [ 985.956110] input: syz1 as /devices/virtual/input/input4981 [ 985.978951] input: syz1 as /devices/virtual/input/input4982 [ 985.983864] input: syz1 as /devices/virtual/input/input4983 [ 986.251297] lowmemorykiller: Killing 'syz-executor.5' (14287) (tgid 14287), adj 1000, [ 986.251297] to free 52280kB on behalf of 'kswapd0' (33) because [ 986.251297] cache 17104kB is below limit 65536kB for oom_score_adj 12 [ 986.251297] Free memory is -6696kB above reserved [ 986.271893] lowmemorykiller: Killing 'syz-executor.5' (14355) (tgid 14355), adj 1000, [ 986.271893] to free 52248kB on behalf of 'kswapd0' (33) because [ 986.271893] cache 17104kB is below limit 65536kB for oom_score_adj 12 [ 986.271893] Free memory is -6584kB above reserved [ 986.287781] lowmemorykiller: Killing 'syz-executor.0' (14314) (tgid 14314), adj 1000, [ 986.287781] to free 52244kB on behalf of 'kswapd0' (33) because [ 986.287781] cache 17104kB is below limit 65536kB for oom_score_adj 12 [ 986.287781] Free memory is 4512kB above reserved [ 986.302015] lowmemorykiller: Killing 'syz-executor.3' (14308) (tgid 14308), adj 1000, [ 986.302015] to free 52240kB on behalf of 'kswapd0' (33) because [ 986.302015] cache 17104kB is below limit 65536kB for oom_score_adj 12 [ 986.302015] Free memory is 35196kB above reserved [ 986.319292] lowmemorykiller: Killing 'syz-executor.3' (14356) (tgid 14356), adj 1000, [ 986.319292] to free 52252kB on behalf of 'kswapd0' (33) because [ 986.319292] cache 17104kB is below limit 65536kB for oom_score_adj 12 [ 986.319292] Free memory is 48200kB above reserved [ 986.326863] lowmemorykiller: Killing 'syz-executor.1' (14321) (tgid 14321), adj 1000, [ 986.326863] to free 52240kB on behalf of 'kswapd0' (33) because [ 986.326863] cache 17104kB is below limit 65536kB for oom_score_adj 12 [ 986.326863] Free memory is 64060kB above reserved [ 986.341589] input: syz1 as /devices/virtual/input/input4984 [ 986.373576] input: syz1 as /devices/virtual/input/input4985 [ 986.399270] input: syz1 as /devices/virtual/input/input4986 [ 986.461816] input: syz1 as /devices/virtual/input/input4987 [ 986.657182] input: syz1 as /devices/virtual/input/input4988 [ 986.779897] input: syz1 as /devices/virtual/input/input4989 [ 986.837136] input: syz1 as /devices/virtual/input/input4990 [ 986.907756] input: syz1 as /devices/virtual/input/input4991 [ 986.942875] input: syz1 as /devices/virtual/input/input4992 [ 987.021620] input: syz1 as /devices/virtual/input/input4993 [ 987.105125] lowmemorykiller: Killing 'syz-executor.3' (14397) (tgid 14397), adj 1000, [ 987.105125] to free 52276kB on behalf of 'kswapd0' (33) because [ 987.105125] cache 17168kB is below limit 65536kB for oom_score_adj 12 [ 987.105125] Free memory is -6824kB above reserved [ 987.116766] lowmemorykiller: Killing 'syz-executor.1' (14378) (tgid 14378), adj 1000, [ 987.116766] to free 52248kB on behalf of 'kswapd0' (33) because [ 987.116766] cache 17168kB is below limit 65536kB for oom_score_adj 12 [ 987.116766] Free memory is -7040kB above reserved [ 987.126799] lowmemorykiller: Killing 'syz-executor.5' (14390) (tgid 14390), adj 1000, [ 987.126799] to free 52248kB on behalf of 'kswapd0' (33) because [ 987.126799] cache 17168kB is below limit 65536kB for oom_score_adj 12 [ 987.126799] Free memory is 22860kB above reserved [ 987.134712] lowmemorykiller: Killing 'syz-executor.0' (14394) (tgid 14394), adj 1000, [ 987.134712] to free 52248kB on behalf of 'kswapd0' (33) because [ 987.134712] cache 17168kB is below limit 65536kB for oom_score_adj 12 [ 987.134712] Free memory is 31008kB above reserved [ 987.158088] lowmemorykiller: Killing 'syz-executor.0' (14351) (tgid 14351), adj 1000, [ 987.158088] to free 52236kB on behalf of 'kswapd0' (33) because [ 987.158088] cache 17168kB is below limit 65536kB for oom_score_adj 12 [ 987.158088] Free memory is 29916kB above reserved [ 987.160806] lowmemorykiller: Killing 'syz-executor.3' (31060) (tgid 31060), adj 1000, [ 987.160806] to free 51608kB on behalf of 'kswapd0' (33) because [ 987.160806] cache 17168kB is below limit 65536kB for oom_score_adj 12 [ 987.160806] Free memory is 59628kB above reserved [ 987.183817] lowmemorykiller: Killing 'syz-executor.3' (31579) (tgid 31579), adj 1000, [ 987.183817] to free 51608kB on behalf of 'kswapd0' (33) because [ 987.183817] cache 17168kB is below limit 65536kB for oom_score_adj 12 [ 987.183817] Free memory is 59280kB above reserved [ 987.352298] input: syz1 as /devices/virtual/input/input4994 [ 987.807366] input: syz1 as /devices/virtual/input/input4995 [ 987.807779] input: syz1 as /devices/virtual/input/input4996 [ 987.816160] input: syz1 as /devices/virtual/input/input4997 [ 987.892839] input: syz1 as /devices/virtual/input/input4998 [ 988.062124] lowmemorykiller: Killing 'syz-executor.2' (14428) (tgid 14428), adj 1000, [ 988.062124] to free 52292kB on behalf of 'kswapd0' (33) because [ 988.062124] cache 20328kB is below limit 65536kB for oom_score_adj 12 [ 988.062124] Free memory is -6684kB above reserved [ 988.066924] lowmemorykiller: Killing 'syz-executor.1' (14471) (tgid 14471), adj 1000, [ 988.066924] to free 52260kB on behalf of 'kswapd0' (33) because [ 988.066924] cache 20328kB is below limit 65536kB for oom_score_adj 12 [ 988.066924] Free memory is -6960kB above reserved [ 988.079021] lowmemorykiller: Killing 'syz-executor.3' (14458) (tgid 14458), adj 1000, [ 988.079021] to free 52252kB on behalf of 'kswapd0' (33) because [ 988.079021] cache 20328kB is below limit 65536kB for oom_score_adj 12 [ 988.079021] Free memory is -7428kB above reserved [ 988.108382] lowmemorykiller: Killing 'syz-executor.0' (14447) (tgid 14447), adj 1000, [ 988.108382] to free 52248kB on behalf of 'kswapd0' (33) because [ 988.108382] cache 20328kB is below limit 65536kB for oom_score_adj 12 [ 988.108382] Free memory is -3860kB above reserved [ 988.134271] lowmemorykiller: Killing 'syz-executor.5' (14443) (tgid 14443), adj 1000, [ 988.134271] to free 52244kB on behalf of 'kswapd0' (33) because [ 988.134271] cache 20328kB is below limit 65536kB for oom_score_adj 12 [ 988.134271] Free memory is 28356kB above reserved [ 988.156972] lowmemorykiller: Killing 'syz-executor.1' (14430) (tgid 14430), adj 1000, [ 988.156972] to free 52240kB on behalf of 'kswapd0' (33) because [ 988.156972] cache 20328kB is below limit 65536kB for oom_score_adj 12 [ 988.156972] Free memory is 41816kB above reserved [ 988.200229] lowmemorykiller: Killing 'syz-executor.3' (32305) (tgid 32305), adj 1000, [ 988.200229] to free 51608kB on behalf of 'kswapd0' (33) because [ 988.200229] cache 19928kB is below limit 65536kB for oom_score_adj 12 [ 988.200229] Free memory is 56376kB above reserved [ 988.342699] input: syz1 as /devices/virtual/input/input4999 [ 988.345052] input: syz1 as /devices/virtual/input/input5000 [ 988.347085] input: syz1 as /devices/virtual/input/input5001 [ 988.396162] input: syz1 as /devices/virtual/input/input5002 [ 988.440678] input: syz1 as /devices/virtual/input/input5003 [ 988.464474] input: syz1 as /devices/virtual/input/input5004 [ 988.890579] input: syz1 as /devices/virtual/input/input5005 [ 988.909066] input: syz1 as /devices/virtual/input/input5006 [ 988.950385] input: syz1 as /devices/virtual/input/input5007 [ 989.089713] input: syz1 as /devices/virtual/input/input5008 [ 989.103435] lowmemorykiller: Killing 'syz-executor.3' (14498) (tgid 14498), adj 1000, [ 989.103435] to free 52276kB on behalf of 'kswapd0' (33) because [ 989.103435] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 989.103435] Free memory is -6608kB above reserved [ 989.116386] lowmemorykiller: Killing 'syz-executor.5' (14547) (tgid 14547), adj 1000, [ 989.116386] to free 52272kB on behalf of 'kswapd0' (33) because [ 989.116386] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 989.116386] Free memory is -6608kB above reserved [ 989.127783] lowmemorykiller: Killing 'syz-executor.3' (14558) (tgid 14558), adj 1000, [ 989.127783] to free 52252kB on behalf of 'kswapd0' (33) because [ 989.127783] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 989.127783] Free memory is 18092kB above reserved [ 989.146637] lowmemorykiller: Killing 'syz-executor.0' (14504) (tgid 14504), adj 1000, [ 989.146637] to free 52248kB on behalf of 'kswapd0' (33) because [ 989.146637] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 989.146637] Free memory is 33792kB above reserved [ 989.148471] lowmemorykiller: Killing 'syz-executor.5' (14505) (tgid 14505), adj 1000, [ 989.148471] to free 52248kB on behalf of 'kswapd0' (33) because [ 989.148471] cache 19872kB is below limit 65536kB for oom_score_adj 12 [ 989.148471] Free memory is 52860kB above reserved [ 989.150074] lowmemorykiller: Killing 'syz-executor.1' (14567) (tgid 14567), adj 1000, [ 989.150074] to free 52248kB on behalf of 'kswapd0' (33) because [ 989.150074] cache 20120kB is below limit 65536kB for oom_score_adj 12 [ 989.150074] Free memory is 52672kB above reserved [ 989.359596] input: syz1 as /devices/virtual/input/input5009 [ 989.406203] input: syz1 as /devices/virtual/input/input5010 [ 989.544608] input: syz1 as /devices/virtual/input/input5011 [ 989.702723] input: syz1 as /devices/virtual/input/input5012 [ 989.725110] input: syz1 as /devices/virtual/input/input5013 [ 989.770353] input: syz1 as /devices/virtual/input/input5014 [ 989.787737] lowmemorykiller: Killing 'syz-executor.3' (14589) (tgid 14589), adj 1000, [ 989.787737] to free 52320kB on behalf of 'kswapd0' (33) because [ 989.787737] cache 19768kB is below limit 65536kB for oom_score_adj 12 [ 989.787737] Free memory is -6704kB above reserved [ 989.796732] lowmemorykiller: Killing 'syz-executor.5' (14634) (tgid 14634), adj 1000, [ 989.796732] to free 52308kB on behalf of 'kswapd0' (33) because [ 989.796732] cache 19768kB is below limit 65536kB for oom_score_adj 12 [ 989.796732] Free memory is -6952kB above reserved [ 989.799415] lowmemorykiller: Killing 'syz-executor.2' (14538) (tgid 14538), adj 1000, [ 989.799415] to free 52284kB on behalf of 'kswapd0' (33) because [ 989.799415] cache 19768kB is below limit 65536kB for oom_score_adj 12 [ 989.799415] Free memory is 16248kB above reserved [ 989.828928] lowmemorykiller: Killing 'syz-executor.0' (14599) (tgid 14599), adj 1000, [ 989.828928] to free 52272kB on behalf of 'kswapd0' (33) because [ 989.828928] cache 19768kB is below limit 65536kB for oom_score_adj 12 [ 989.828928] Free memory is 16248kB above reserved [ 989.858340] lowmemorykiller: Killing 'syz-executor.3' (14646) (tgid 14646), adj 1000, [ 989.858340] to free 52252kB on behalf of 'kswapd0' (33) because [ 989.858340] cache 20312kB is below limit 65536kB for oom_score_adj 12 [ 989.858340] Free memory is 32464kB above reserved [ 989.860317] lowmemorykiller: Killing 'syz-executor.0' (14570) (tgid 14570), adj 1000, [ 989.860317] to free 52248kB on behalf of 'kswapd0' (33) because [ 989.860317] cache 20212kB is below limit 65536kB for oom_score_adj 12 [ 989.860317] Free memory is 45304kB above reserved [ 989.888350] lowmemorykiller: Killing 'syz-executor.1' (14514) (tgid 14514), adj 1000, [ 989.888350] to free 52240kB on behalf of 'kswapd0' (33) because [ 989.888350] cache 20212kB is below limit 65536kB for oom_score_adj 12 [ 989.888350] Free memory is 47804kB above reserved [ 989.893467] input: syz1 as /devices/virtual/input/input5015 [ 990.022243] input: syz1 as /devices/virtual/input/input5016 [ 990.269368] input: syz1 as /devices/virtual/input/input5017 [ 990.290772] input: syz1 as /devices/virtual/input/input5018 [ 990.352761] input: syz1 as /devices/virtual/input/input5019 [ 990.530810] lowmemorykiller: Killing 'syz-executor.1' (14669) (tgid 14669), adj 1000, [ 990.530810] to free 52264kB on behalf of 'kswapd0' (33) because [ 990.530810] cache 20272kB is below limit 65536kB for oom_score_adj 12 [ 990.530810] Free memory is -6760kB above reserved [ 990.555883] lowmemorykiller: Killing 'syz-executor.0' (14655) (tgid 14655), adj 1000, [ 990.555883] to free 52248kB on behalf of 'kswapd0' (33) because [ 990.555883] cache 20272kB is below limit 65536kB for oom_score_adj 12 [ 990.555883] Free memory is -7380kB above reserved [ 990.563945] lowmemorykiller: Killing 'syz-executor.1' (14711) (tgid 14711), adj 1000, [ 990.563945] to free 52260kB on behalf of 'kswapd0' (33) because [ 990.563945] cache 20272kB is below limit 65536kB for oom_score_adj 12 [ 990.563945] Free memory is 4400kB above reserved [ 990.576503] lowmemorykiller: Killing 'syz-executor.1' (14723) (tgid 14723), adj 1000, [ 990.576503] to free 52268kB on behalf of 'kswapd0' (33) because [ 990.576503] cache 20272kB is below limit 65536kB for oom_score_adj 12 [ 990.576503] Free memory is 14576kB above reserved [ 990.590212] lowmemorykiller: Killing 'syz-executor.3' (14691) (tgid 14691), adj 1000, [ 990.590212] to free 52248kB on behalf of 'kswapd0' (33) because [ 990.590212] cache 20272kB is below limit 65536kB for oom_score_adj 12 [ 990.590212] Free memory is 19116kB above reserved [ 990.623669] input: syz1 as /devices/virtual/input/input5020 [ 990.733637] input: syz1 as /devices/virtual/input/input5021 [ 990.763134] input: syz1 as /devices/virtual/input/input5022 [ 990.773859] input: syz1 as /devices/virtual/input/input5023 [ 990.795235] input: syz1 as /devices/virtual/input/input5024 [ 990.815474] input: syz1 as /devices/virtual/input/input5025 [ 991.124455] lowmemorykiller: Killing 'syz-executor.3' (14736) (tgid 14736), adj 1000, [ 991.124455] to free 52252kB on behalf of 'kswapd0' (33) because [ 991.124455] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 991.124455] Free memory is -6680kB above reserved [ 991.136567] lowmemorykiller: Killing 'syz-executor.0' (14700) (tgid 14700), adj 1000, [ 991.136567] to free 52248kB on behalf of 'kswapd0' (33) because [ 991.136567] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 991.136567] Free memory is -6804kB above reserved [ 991.146496] lowmemorykiller: Killing 'syz-executor.5' (14724) (tgid 14724), adj 1000, [ 991.146496] to free 52248kB on behalf of 'kswapd0' (33) because [ 991.146496] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 991.146496] Free memory is 24296kB above reserved [ 991.150863] lowmemorykiller: Killing 'syz-executor.1' (14618) (tgid 14618), adj 1000, [ 991.150863] to free 52236kB on behalf of 'kswapd0' (33) because [ 991.150863] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 991.150863] Free memory is 36196kB above reserved [ 991.157822] lowmemorykiller: Killing 'syz-executor.5' (14681) (tgid 14681), adj 1000, [ 991.157822] to free 52236kB on behalf of 'kswapd0' (33) because [ 991.157822] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 991.157822] Free memory is 35800kB above reserved [ 991.179661] lowmemorykiller: Killing 'syz-executor.3' (32520) (tgid 32520), adj 1000, [ 991.179661] to free 51608kB on behalf of 'kswapd0' (33) because [ 991.179661] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 991.179661] Free memory is 43532kB above reserved [ 991.265714] input: syz1 as /devices/virtual/input/input5026 [ 991.476483] input: syz1 as /devices/virtual/input/input5028 [ 991.529445] input: syz1 as /devices/virtual/input/input5029 [ 991.690065] input: syz1 as /devices/virtual/input/input5030 [ 991.701954] input: syz1 as /devices/virtual/input/input5027 [ 991.909672] input: syz1 as /devices/virtual/input/input5031 [ 991.929825] lowmemorykiller: Killing 'syz-executor.5' (14803) (tgid 14803), adj 1000, [ 991.929825] to free 52316kB on behalf of 'kswapd0' (33) because [ 991.929825] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 991.929825] Free memory is -6808kB above reserved [ 991.931392] lowmemorykiller: Killing 'syz-executor.2' (14763) (tgid 14763), adj 1000, [ 991.931392] to free 52296kB on behalf of 'kswapd0' (33) because [ 991.931392] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 991.931392] Free memory is -7056kB above reserved [ 991.941422] input: syz1 as /devices/virtual/input/input5032 [ 991.976740] lowmemorykiller: Killing 'syz-executor.3' (14773) (tgid 14773), adj 1000, [ 991.976740] to free 52252kB on behalf of 'kswapd0' (33) because [ 991.976740] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 991.976740] Free memory is 544kB above reserved [ 991.992746] lowmemorykiller: Killing 'syz-executor.3' (14832) (tgid 14832), adj 1000, [ 991.992746] to free 52252kB on behalf of 'kswapd0' (33) because [ 991.992746] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 991.992746] Free memory is 25064kB above reserved [ 992.006388] lowmemorykiller: Killing 'syz-executor.0' (14782) (tgid 14782), adj 1000, [ 992.006388] to free 52248kB on behalf of 'kswapd0' (33) because [ 992.006388] cache 19772kB is below limit 65536kB for oom_score_adj 12 [ 992.006388] Free memory is 32936kB above reserved [ 992.014553] input: syz1 as /devices/virtual/input/input5033 [ 992.133267] input: syz1 as /devices/virtual/input/input5034 [ 992.395018] input: syz1 as /devices/virtual/input/input5035 [ 992.466423] input: syz1 as /devices/virtual/input/input5036 [ 992.534331] lowmemorykiller: Killing 'syz-executor.5' (14783) (tgid 14783), adj 1000, [ 992.534331] to free 52248kB on behalf of 'kswapd0' (33) because [ 992.534331] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 992.534331] Free memory is -6780kB above reserved [ 992.557108] lowmemorykiller: Killing 'syz-executor.0' (14819) (tgid 14819), adj 1000, [ 992.557108] to free 52248kB on behalf of 'kswapd0' (33) because [ 992.557108] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 992.557108] Free memory is -6904kB above reserved [ 992.558946] lowmemorykiller: Killing 'syz-executor.5' (14863) (tgid 14863), adj 1000, [ 992.558946] to free 52272kB on behalf of 'kswapd0' (33) because [ 992.558946] cache 19756kB is below limit 65536kB for oom_score_adj 12 [ 992.558946] Free memory is 24748kB above reserved [ 992.578756] lowmemorykiller: Killing 'syz-executor.0' (14877) (tgid 14877), adj 1000, [ 992.578756] to free 52244kB on behalf of 'kswapd0' (33) because [ 992.578756] cache 19756kB is below limit 65536kB for oom_score_adj 12 [ 992.578756] Free memory is 24592kB above reserved [ 992.605796] lowmemorykiller: Killing 'syz-executor.1' (14771) (tgid 14771), adj 1000, [ 992.605796] to free 52240kB on behalf of 'kswapd0' (33) because [ 992.605796] cache 19756kB is below limit 65536kB for oom_score_adj 12 [ 992.605796] Free memory is 55032kB above reserved [ 992.644201] input: syz1 as /devices/virtual/input/input5037 [ 992.736854] input: syz1 as /devices/virtual/input/input5038 [ 992.911723] input: syz1 as /devices/virtual/input/input5039 [ 992.935302] input: syz1 as /devices/virtual/input/input5040 [ 993.047447] lowmemorykiller: Killing 'syz-executor.1' (14908) (tgid 14908), adj 1000, [ 993.047447] to free 52260kB on behalf of 'kswapd0' (33) because [ 993.047447] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 993.047447] Free memory is -6728kB above reserved [ 993.052753] lowmemorykiller: Killing 'syz-executor.1' (14919) (tgid 14919), adj 1000, [ 993.052753] to free 52292kB on behalf of 'kswapd0' (33) because [ 993.052753] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 993.052753] Free memory is -6728kB above reserved [ 993.054477] lowmemorykiller: Killing 'syz-executor.3' (14874) (tgid 14874), adj 1000, [ 993.054477] to free 52252kB on behalf of 'kswapd0' (33) because [ 993.054477] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 993.054477] Free memory is -6428kB above reserved [ 993.066439] lowmemorykiller: Killing 'syz-executor.3' (14942) (tgid 14942), adj 1000, [ 993.066439] to free 52252kB on behalf of 'kswapd0' (33) because [ 993.066439] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 993.066439] Free memory is -4028kB above reserved [ 993.076446] lowmemorykiller: Killing 'syz-executor.5' (14937) (tgid 14937), adj 1000, [ 993.076446] to free 52248kB on behalf of 'kswapd0' (33) because [ 993.076446] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 993.076446] Free memory is 27372kB above reserved [ 993.086371] lowmemorykiller: Killing 'syz-executor.0' (14912) (tgid 14912), adj 1000, [ 993.086371] to free 52244kB on behalf of 'kswapd0' (33) because [ 993.086371] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 993.086371] Free memory is 45172kB above reserved [ 993.088162] lowmemorykiller: Killing 'syz-executor.1' (14844) (tgid 14844), adj 1000, [ 993.088162] to free 52240kB on behalf of 'kswapd0' (33) because [ 993.088162] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 993.088162] Free memory is 62144kB above reserved [ 993.096359] lowmemorykiller: Killing 'syz-executor.1' (14896) (tgid 14896), adj 1000, [ 993.096359] to free 52240kB on behalf of 'kswapd0' (33) because [ 993.096359] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 993.096359] Free memory is 63320kB above reserved [ 993.182974] input: syz1 as /devices/virtual/input/input5041 [ 993.264429] input: syz1 as /devices/virtual/input/input5042 [ 993.307250] input: syz1 as /devices/virtual/input/input5043 [ 993.322383] input: syz1 as /devices/virtual/input/input5044 [ 993.331315] input: syz1 as /devices/virtual/input/input5045 [ 993.671533] input: syz1 as /devices/virtual/input/input5046 [ 993.693913] input: syz1 as /devices/virtual/input/input5047 [ 993.857187] lowmemorykiller: Killing 'syz-executor.0' (14960) (tgid 14960), adj 1000, [ 993.857187] to free 52248kB on behalf of 'kswapd0' (33) because [ 993.857187] cache 19756kB is below limit 65536kB for oom_score_adj 12 [ 993.857187] Free memory is -6816kB above reserved [ 993.889068] lowmemorykiller: Killing 'syz-executor.3' (14993) (tgid 14993), adj 1000, [ 993.889068] to free 52248kB on behalf of 'kswapd0' (33) because [ 993.889068] cache 19756kB is below limit 65536kB for oom_score_adj 12 [ 993.889068] Free memory is -7188kB above reserved [ 993.906640] lowmemorykiller: Killing 'syz-executor.0' (15012) (tgid 15012), adj 1000, [ 993.906640] to free 52248kB on behalf of 'kswapd0' (33) because [ 993.906640] cache 19756kB is below limit 65536kB for oom_score_adj 12 [ 993.906640] Free memory is 6708kB above reserved [ 993.930154] input: syz1 as /devices/virtual/input/input5048 [ 993.943381] lowmemorykiller: Killing 'syz-executor.5' (15014) (tgid 15014), adj 1000, [ 993.943381] to free 52248kB on behalf of 'kswapd0' (33) because [ 993.943381] cache 19804kB is below limit 65536kB for oom_score_adj 12 [ 993.943381] Free memory is 27956kB above reserved [ 993.962034] input: syz1 as /devices/virtual/input/input5049 [ 994.280117] input: syz1 as /devices/virtual/input/input5050 [ 994.303742] input: syz1 as /devices/virtual/input/input5051 [ 994.364835] input: syz1 as /devices/virtual/input/input5052 [ 994.391867] input: syz1 as /devices/virtual/input/input5053 [ 994.445919] lowmemorykiller: Killing 'syz-executor.5' (15038) (tgid 15038), adj 1000, [ 994.445919] to free 52272kB on behalf of 'kswapd0' (33) because [ 994.445919] cache 20140kB is below limit 65536kB for oom_score_adj 12 [ 994.445919] Free memory is -6684kB above reserved [ 994.450809] lowmemorykiller: Killing 'syz-executor.3' (15059) (tgid 15059), adj 1000, [ 994.450809] to free 52248kB on behalf of 'kswapd0' (33) because [ 994.450809] cache 20140kB is below limit 65536kB for oom_score_adj 12 [ 994.450809] Free memory is -6932kB above reserved [ 994.466774] lowmemorykiller: Killing 'syz-executor.5' (14964) (tgid 14964), adj 1000, [ 994.466774] to free 52244kB on behalf of 'kswapd0' (33) because [ 994.466774] cache 20140kB is below limit 65536kB for oom_score_adj 12 [ 994.466774] Free memory is -1356kB above reserved [ 994.481708] lowmemorykiller: Killing 'syz-executor.0' (15061) (tgid 15061), adj 1000, [ 994.481708] to free 52244kB on behalf of 'kswapd0' (33) because [ 994.481708] cache 20208kB is below limit 65536kB for oom_score_adj 12 [ 994.481708] Free memory is 19656kB above reserved [ 994.497602] lowmemorykiller: Killing 'syz-executor.1' (14996) (tgid 14996), adj 1000, [ 994.497602] to free 52240kB on behalf of 'kswapd0' (33) because [ 994.497602] cache 20208kB is below limit 65536kB for oom_score_adj 12 [ 994.497602] Free memory is 29968kB above reserved [ 994.521692] lowmemorykiller: Killing 'syz-executor.1' (15034) (tgid 15034), adj 1000, [ 994.521692] to free 52240kB on behalf of 'kswapd0' (33) because [ 994.521692] cache 20208kB is below limit 65536kB for oom_score_adj 12 [ 994.521692] Free memory is 48664kB above reserved [ 994.781829] input: syz1 as /devices/virtual/input/input5054 [ 994.829722] input: syz1 as /devices/virtual/input/input5055 [ 994.900018] input: syz1 as /devices/virtual/input/input5056 [ 994.932292] input: syz1 as /devices/virtual/input/input5057 [ 995.056371] lowmemorykiller: Killing 'syz-executor.1' (15081) (tgid 15081), adj 1000, [ 995.056371] to free 52264kB on behalf of 'kswapd0' (33) because [ 995.056371] cache 19632kB is below limit 65536kB for oom_score_adj 12 [ 995.056371] Free memory is -6864kB above reserved [ 995.058012] lowmemorykiller: Killing 'syz-executor.3' (15098) (tgid 15098), adj 1000, [ 995.058012] to free 52252kB on behalf of 'kswapd0' (33) because [ 995.058012] cache 19632kB is below limit 65536kB for oom_score_adj 12 [ 995.058012] Free memory is -7112kB above reserved [ 995.213096] lowmemorykiller: Killing 'syz-executor.3' (15141) (tgid 15141), adj 1000, [ 995.213096] to free 52252kB on behalf of 'kswapd0' (33) because [ 995.213096] cache 19632kB is below limit 65536kB for oom_score_adj 12 [ 995.213096] Free memory is -6704kB above reserved [ 995.226384] lowmemorykiller: Killing 'syz-executor.5' (15109) (tgid 15109), adj 1000, [ 995.226384] to free 52248kB on behalf of 'kswapd0' (33) because [ 995.226384] cache 19632kB is below limit 65536kB for oom_score_adj 12 [ 995.226384] Free memory is -6704kB above reserved [ 995.236375] lowmemorykiller: Killing 'syz-executor.0' (15116) (tgid 15116), adj 1000, [ 995.236375] to free 52244kB on behalf of 'kswapd0' (33) because [ 995.236375] cache 19632kB is below limit 65536kB for oom_score_adj 12 [ 995.236375] Free memory is 20096kB above reserved [ 995.250017] lowmemorykiller: Killing 'syz-executor.3' (32665) (tgid 32665), adj 1000, [ 995.250017] to free 51608kB on behalf of 'kswapd0' (33) because [ 995.250017] cache 19632kB is below limit 65536kB for oom_score_adj 12 [ 995.250017] Free memory is 34372kB above reserved [ 995.266115] lowmemorykiller: Killing 'syz-executor.5' (32748) (tgid 32748), adj 1000, [ 995.266115] to free 51608kB on behalf of 'kswapd0' (33) because [ 995.266115] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 995.266115] Free memory is 45516kB above reserved [ 995.305696] lowmemorykiller: Killing 'syz-executor.3' (322) (tgid 322), adj 1000, [ 995.305696] to free 51608kB on behalf of 'kswapd0' (33) because [ 995.305696] cache 19732kB is below limit 65536kB for oom_score_adj 12 [ 995.305696] Free memory is 62032kB above reserved [ 995.434534] input: syz1 as /devices/virtual/input/input5058 [ 995.454414] input: syz1 as /devices/virtual/input/input5059 [ 995.491955] uinput: write device info first [ 995.514544] input: syz1 as /devices/virtual/input/input5061 [ 995.570946] input: syz1 as /devices/virtual/input/input5062 [ 996.125530] input: syz1 as /devices/virtual/input/input5063 [ 996.152569] input: syz1 as /devices/virtual/input/input5064 [ 996.199741] input: syz1 as /devices/virtual/input/input5065 [ 996.202655] input: syz1 as /devices/virtual/input/input5066 [ 996.269302] lowmemorykiller: Killing 'syz-executor.3' (15182) (tgid 15182), adj 1000, [ 996.269302] to free 52312kB on behalf of 'kswapd0' (33) because [ 996.269302] cache 20136kB is below limit 65536kB for oom_score_adj 12 [ 996.269302] Free memory is -6656kB above reserved [ 996.310080] lowmemorykiller: Killing 'syz-executor.0' (15133) (tgid 15133), adj 1000, [ 996.310080] to free 52260kB on behalf of 'kswapd0' (33) because [ 996.310080] cache 20136kB is below limit 65536kB for oom_score_adj 12 [ 996.310080] Free memory is -6964kB above reserved [ 996.327678] lowmemorykiller: Killing 'syz-executor.5' (15154) (tgid 15154), adj 1000, [ 996.327678] to free 52248kB on behalf of 'kswapd0' (33) because [ 996.327678] cache 20332kB is below limit 65536kB for oom_score_adj 12 [ 996.327678] Free memory is 16308kB above reserved [ 996.336405] lowmemorykiller: Killing 'syz-executor.0' (15188) (tgid 15188), adj 1000, [ 996.336405] to free 52248kB on behalf of 'kswapd0' (33) because [ 996.336405] cache 20332kB is below limit 65536kB for oom_score_adj 12 [ 996.336405] Free memory is 27864kB above reserved [ 996.617331] input: syz1 as /devices/virtual/input/input5067 [ 996.637721] input: syz1 as /devices/virtual/input/input5068 [ 996.744118] lowmemorykiller: Killing 'syz-executor.5' (15239) (tgid 15239), adj 1000, [ 996.744118] to free 52272kB on behalf of 'kswapd0' (33) because [ 996.744118] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 996.744118] Free memory is -6716kB above reserved [ 996.765461] lowmemorykiller: Killing 'syz-executor.3' (15259) (tgid 15259), adj 1000, [ 996.765461] to free 52252kB on behalf of 'kswapd0' (33) because [ 996.765461] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 996.765461] Free memory is -6964kB above reserved [ 996.776390] lowmemorykiller: Killing 'syz-executor.1' (15157) (tgid 15157), adj 1000, [ 996.776390] to free 52240kB on behalf of 'kswapd0' (33) because [ 996.776390] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 996.776390] Free memory is 2828kB above reserved [ 996.778208] lowmemorykiller: Killing 'syz-executor.1' (15218) (tgid 15218), adj 1000, [ 996.778208] to free 52240kB on behalf of 'kswapd0' (33) because [ 996.778208] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 996.778208] Free memory is 17208kB above reserved [ 996.787542] input: syz1 as /devices/virtual/input/input5069 [ 996.826130] lowmemorykiller: Killing 'syz-executor.1' (15260) (tgid 15260), adj 1000, [ 996.826130] to free 52240kB on behalf of 'kswapd0' (33) because [ 996.826130] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 996.826130] Free memory is 19508kB above reserved [ 996.913468] input: syz1 as /devices/virtual/input/input5070 [ 997.002130] uinput: write device info first [ 997.130725] input: syz1 as /devices/virtual/input/input5072 [ 997.157211] input: syz1 as /devices/virtual/input/input5073 [ 997.211653] input: syz1 as /devices/virtual/input/input5074 [ 997.265575] input: syz1 as /devices/virtual/input/input5075 [ 997.345954] lowmemorykiller: Killing 'syz-executor.1' (15284) (tgid 15284), adj 1000, [ 997.345954] to free 52264kB on behalf of 'kswapd0' (33) because [ 997.345954] cache 20144kB is below limit 65536kB for oom_score_adj 12 [ 997.345954] Free memory is -6632kB above reserved [ 997.356962] lowmemorykiller: Killing 'syz-executor.5' (15283) (tgid 15283), adj 1000, [ 997.356962] to free 52248kB on behalf of 'kswapd0' (33) because [ 997.356962] cache 20392kB is below limit 65536kB for oom_score_adj 12 [ 997.356962] Free memory is -6632kB above reserved [ 997.366453] lowmemorykiller: Killing 'syz-executor.0' (15308) (tgid 15308), adj 1000, [ 997.366453] to free 52248kB on behalf of 'kswapd0' (33) because [ 997.366453] cache 20392kB is below limit 65536kB for oom_score_adj 12 [ 997.366453] Free memory is 21668kB above reserved [ 997.376397] lowmemorykiller: Killing 'syz-executor.3' (15320) (tgid 15320), adj 1000, [ 997.376397] to free 52248kB on behalf of 'kswapd0' (33) because [ 997.376397] cache 20392kB is below limit 65536kB for oom_score_adj 12 [ 997.376397] Free memory is 30956kB above reserved [ 997.406381] lowmemorykiller: Killing 'syz-executor.5' (15211) (tgid 15211), adj 1000, [ 997.406381] to free 52236kB on behalf of 'kswapd0' (33) because [ 997.406381] cache 20392kB is below limit 65536kB for oom_score_adj 12 [ 997.406381] Free memory is 37520kB above reserved [ 997.418027] lowmemorykiller: Killing 'syz-executor.0' (15247) (tgid 15247), adj 1000, [ 997.418027] to free 52236kB on behalf of 'kswapd0' (33) because [ 997.418027] cache 20392kB is below limit 65536kB for oom_score_adj 12 [ 997.418027] Free memory is 60276kB above reserved [ 997.439122] lowmemorykiller: Killing 'syz-executor.3' (29598) (tgid 29598), adj 1000, [ 997.439122] to free 51608kB on behalf of 'kswapd0' (33) because [ 997.439122] cache 20392kB is below limit 65536kB for oom_score_adj 12 [ 997.439122] Free memory is 61088kB above reserved [ 997.728857] input: syz1 as /devices/virtual/input/input5076 [ 997.755243] uinput: write device info first [ 997.796031] uinput: write device info first [ 997.887563] input: syz1 as /devices/virtual/input/input5079 [ 997.965840] input: syz1 as /devices/virtual/input/input5080 [ 998.013578] input: syz1 as /devices/virtual/input/input5081 [ 998.191023] lowmemorykiller: Killing 'syz-executor.5' (15335) (tgid 15335), adj 1000, [ 998.191023] to free 52272kB on behalf of 'kswapd0' (33) because [ 998.191023] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 998.191023] Free memory is -6764kB above reserved [ 998.213821] lowmemorykiller: Killing 'syz-executor.0' (15377) (tgid 15377), adj 1000, [ 998.213821] to free 52264kB on behalf of 'kswapd0' (33) because [ 998.213821] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 998.213821] Free memory is -7444kB above reserved [ 998.237657] lowmemorykiller: Killing 'syz-executor.3' (15359) (tgid 15359), adj 1000, [ 998.237657] to free 52252kB on behalf of 'kswapd0' (33) because [ 998.237657] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 998.237657] Free memory is 4000kB above reserved [ 998.251471] lowmemorykiller: Killing 'syz-executor.1' (15406) (tgid 15406), adj 1000, [ 998.251471] to free 52240kB on behalf of 'kswapd0' (33) because [ 998.251471] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 998.251471] Free memory is 27176kB above reserved [ 998.277323] lowmemorykiller: Killing 'syz-executor.0' (15346) (tgid 15346), adj 1000, [ 998.277323] to free 52236kB on behalf of 'kswapd0' (33) because [ 998.277323] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 998.277323] Free memory is 30300kB above reserved [ 998.298522] lowmemorykiller: Killing 'syz-executor.1' (15352) (tgid 15352), adj 1000, [ 998.298522] to free 52236kB on behalf of 'kswapd0' (33) because [ 998.298522] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 998.298522] Free memory is 61196kB above reserved [ 998.322723] input: syz1 as /devices/virtual/input/input5082 [ 998.344899] input: syz1 as /devices/virtual/input/input5083 [ 998.417401] input: syz1 as /devices/virtual/input/input5084 [ 998.545694] input: syz1 as /devices/virtual/input/input5085 [ 998.721762] input: syz1 as /devices/virtual/input/input5086 [ 998.881561] uinput: write device info first [ 998.929191] lowmemorykiller: Killing 'syz-executor.0' (15437) (tgid 15437), adj 1000, [ 998.929191] to free 52268kB on behalf of 'kswapd0' (33) because [ 998.929191] cache 20352kB is below limit 65536kB for oom_score_adj 12 [ 998.929191] Free memory is -6660kB above reserved [ 998.932538] input: syz1 as /devices/virtual/input/input5088 [ 998.939815] input: syz1 as /devices/virtual/input/input5089 [ 998.986507] lowmemorykiller: Killing 'syz-executor.3' (15414) (tgid 15414), adj 1000, [ 998.986507] to free 52252kB on behalf of 'kswapd0' (33) because [ 998.986507] cache 20352kB is below limit 65536kB for oom_score_adj 12 [ 998.986507] Free memory is -6788kB above reserved [ 999.019492] input: syz1 as /devices/virtual/input/input5090 [ 999.035636] lowmemorykiller: Killing 'syz-executor.3' (15463) (tgid 15463), adj 1000, [ 999.035636] to free 52252kB on behalf of 'kswapd0' (33) because [ 999.035636] cache 20352kB is below limit 65536kB for oom_score_adj 12 [ 999.035636] Free memory is 12480kB above reserved [ 999.038104] lowmemorykiller: Killing 'syz-executor.5' (15422) (tgid 15422), adj 1000, [ 999.038104] to free 52248kB on behalf of 'kswapd0' (33) because [ 999.038104] cache 20252kB is below limit 65536kB for oom_score_adj 12 [ 999.038104] Free memory is 31944kB above reserved [ 999.039709] lowmemorykiller: Killing 'syz-executor.5' (15451) (tgid 15451), adj 1000, [ 999.039709] to free 52248kB on behalf of 'kswapd0' (33) because [ 999.039709] cache 20252kB is below limit 65536kB for oom_score_adj 12 [ 999.039709] Free memory is 31448kB above reserved [ 999.115837] uinput: write device info first [ 999.379842] input: syz1 as /devices/virtual/input/input5092 [ 999.474892] input: syz1 as /devices/virtual/input/input5093 [ 999.497705] input: syz1 as /devices/virtual/input/input5094 [ 999.558299] input: syz1 as /devices/virtual/input/input5095 [ 999.642648] lowmemorykiller: Killing 'syz-executor.1' (15478) (tgid 15478), adj 1000, [ 999.642648] to free 52264kB on behalf of 'kswapd0' (33) because [ 999.642648] cache 20304kB is below limit 65536kB for oom_score_adj 12 [ 999.642648] Free memory is -6644kB above reserved [ 999.659954] lowmemorykiller: Killing 'syz-executor.5' (15518) (tgid 15518), adj 1000, [ 999.659954] to free 52256kB on behalf of 'kswapd0' (33) because [ 999.659954] cache 20304kB is below limit 65536kB for oom_score_adj 12 [ 999.659954] Free memory is -7636kB above reserved [ 999.671339] lowmemorykiller: Killing 'syz-executor.3' (15510) (tgid 15510), adj 1000, [ 999.671339] to free 52252kB on behalf of 'kswapd0' (33) because [ 999.671339] cache 20304kB is below limit 65536kB for oom_score_adj 12 [ 999.671339] Free memory is 1664kB above reserved [ 999.699905] lowmemorykiller: Killing 'syz-executor.0' (15509) (tgid 15509), adj 1000, [ 999.699905] to free 52248kB on behalf of 'kswapd0' (33) because [ 999.699905] cache 20304kB is below limit 65536kB for oom_score_adj 12 [ 999.699905] Free memory is 14924kB above reserved [ 999.715148] lowmemorykiller: Killing 'syz-executor.1' (15440) (tgid 15440), adj 1000, [ 999.715148] to free 52240kB on behalf of 'kswapd0' (33) because [ 999.715148] cache 20304kB is below limit 65536kB for oom_score_adj 12 [ 999.715148] Free memory is 42364kB above reserved [ 999.747508] lowmemorykiller: Killing 'syz-executor.3' (29659) (tgid 29659), adj 1000, [ 999.747508] to free 51608kB on behalf of 'kswapd0' (33) because [ 999.747508] cache 20304kB is below limit 65536kB for oom_score_adj 12 [ 999.747508] Free memory is 42772kB above reserved [ 999.767397] lowmemorykiller: Killing 'syz-executor.3' (29691) (tgid 29691), adj 1000, [ 999.767397] to free 51608kB on behalf of 'kswapd0' (33) because [ 999.767397] cache 20304kB is below limit 65536kB for oom_score_adj 12 [ 999.767397] Free memory is 64844kB above reserved [ 1000.008138] input: syz1 as /devices/virtual/input/input5096 [ 1000.011637] uinput: write device info first [ 1000.031461] input: syz1 as /devices/virtual/input/input5098 [ 1000.142051] input: syz1 as /devices/virtual/input/input5099 [ 1000.231774] input: syz1 as /devices/virtual/input/input5100 [ 1000.428155] input: syz1 as /devices/virtual/input/input5101 [ 1000.479745] input: syz1 as /devices/virtual/input/input5102 [ 1000.508090] lowmemorykiller: Killing 'syz-executor.1' (15533) (tgid 15533), adj 1000, [ 1000.508090] to free 52272kB on behalf of 'kswapd0' (33) because [ 1000.508090] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 1000.508090] Free memory is -6856kB above reserved [ 1000.509639] lowmemorykiller: Killing 'syz-executor.0' (15586) (tgid 15586), adj 1000, [ 1000.509639] to free 52256kB on behalf of 'kswapd0' (33) because [ 1000.509639] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 1000.509639] Free memory is -7320kB above reserved [ 1000.519155] lowmemorykiller: Killing 'syz-executor.3' (15552) (tgid 15552), adj 1000, [ 1000.519155] to free 52252kB on behalf of 'kswapd0' (33) because [ 1000.519155] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 1000.519155] Free memory is 2880kB above reserved [ 1000.551516] lowmemorykiller: Killing 'syz-executor.0' (15546) (tgid 15546), adj 1000, [ 1000.551516] to free 52248kB on behalf of 'kswapd0' (33) because [ 1000.551516] cache 19760kB is below limit 65536kB for oom_score_adj 12 [ 1000.551516] Free memory is 5680kB above reserved [ 1000.649477] input: syz1 as /devices/virtual/input/input5103 [ 1000.701168] input: syz1 as /devices/virtual/input/input5104 [ 1000.936010] input: syz1 as /devices/virtual/input/input5105 [ 1001.036918] input: syz1 as /devices/virtual/input/input5106 [ 1001.047028] lowmemorykiller: Killing 'syz-executor.0' (15625) (tgid 15625), adj 1000, [ 1001.047028] to free 52280kB on behalf of 'kswapd0' (33) because [ 1001.047028] cache 19800kB is below limit 65536kB for oom_score_adj 12 [ 1001.047028] Free memory is -6708kB above reserved [ 1001.071970] uinput: write device info first [ 1001.207722] input: syz1 as /devices/virtual/input/input5108 [ 1001.223235] input: syz1 as /devices/virtual/input/input5109 [ 1001.234969] uinput: write device info first [ 1001.254186] lowmemorykiller: Killing 'syz-executor.3' (15585) (tgid 15585), adj 1000, [ 1001.254186] to free 52252kB on behalf of 'kswapd0' (33) because [ 1001.254186] cache 19800kB is below limit 65536kB for oom_score_adj 12 [ 1001.254186] Free memory is -6720kB above reserved [ 1001.276790] lowmemorykiller: Killing 'syz-executor.3' (15651) (tgid 15651), adj 1000, [ 1001.276790] to free 52252kB on behalf of 'kswapd0' (33) because [ 1001.276790] cache 19800kB is below limit 65536kB for oom_score_adj 12 [ 1001.276790] Free memory is -548kB above reserved [ 1001.279378] lowmemorykiller: Killing 'syz-executor.5' (15608) (tgid 15608), adj 1000, [ 1001.279378] to free 52248kB on behalf of 'kswapd0' (33) because [ 1001.279378] cache 19800kB is below limit 65536kB for oom_score_adj 12 [ 1001.279378] Free memory is -384kB above reserved [ 1001.283194] lowmemorykiller: Killing 'syz-executor.5' (15648) (tgid 15648), adj 1000, [ 1001.283194] to free 52248kB on behalf of 'kswapd0' (33) because [ 1001.283194] cache 19800kB is below limit 65536kB for oom_score_adj 12 [ 1001.283194] Free memory is -1004kB above reserved [ 1001.296389] lowmemorykiller: Killing 'syz-executor.5' (15559) (tgid 15559), adj 1000, [ 1001.296389] to free 52244kB on behalf of 'kswapd0' (33) because [ 1001.296389] cache 19800kB is below limit 65536kB for oom_score_adj 12 [ 1001.296389] Free memory is 2996kB above reserved [ 1001.298111] lowmemorykiller: Killing 'syz-executor.1' (15599) (tgid 15599), adj 1000, [ 1001.298111] to free 52228kB on behalf of 'kswapd0' (33) because [ 1001.298111] cache 19800kB is below limit 65536kB for oom_score_adj 12 [ 1001.298111] Free memory is 37796kB above reserved [ 1001.299570] lowmemorykiller: Killing 'syz-executor.1' (15632) (tgid 15632), adj 1000, [ 1001.299570] to free 52228kB on behalf of 'kswapd0' (33) because [ 1001.299570] cache 19800kB is below limit 65536kB for oom_score_adj 12 [ 1001.299570] Free memory is 38496kB above reserved [ 1001.531814] input: syz1 as /devices/virtual/input/input5111 [ 1001.793690] input: syz1 as /devices/virtual/input/input5112 [ 1001.805713] input: syz1 as /devices/virtual/input/input5113 [ 1001.812394] input: syz1 as /devices/virtual/input/input5114 [ 1001.817904] input: syz1 as /devices/virtual/input/input5115 [ 1001.972928] lowmemorykiller: Killing 'syz-executor.2' (15700) (tgid 15700), adj 1000, [ 1001.972928] to free 52284kB on behalf of 'kswapd0' (33) because [ 1001.972928] cache 20496kB is below limit 65536kB for oom_score_adj 12 [ 1001.972928] Free memory is -6724kB above reserved [ 1001.992576] lowmemorykiller: Killing 'syz-executor.3' (15706) (tgid 15706), adj 1000, [ 1001.992576] to free 52252kB on behalf of 'kswapd0' (33) because [ 1001.992576] cache 20496kB is below limit 65536kB for oom_score_adj 12 [ 1001.992576] Free memory is -7344kB above reserved [ 1002.014241] lowmemorykiller: Killing 'syz-executor.0' (15718) (tgid 15718), adj 1000, [ 1002.014241] to free 52248kB on behalf of 'kswapd0' (33) because [ 1002.014241] cache 20496kB is below limit 65536kB for oom_score_adj 12 [ 1002.014241] Free memory is 5056kB above reserved [ 1002.029706] lowmemorykiller: Killing 'syz-executor.0' (15668) (tgid 15668), adj 1000, [ 1002.029706] to free 52244kB on behalf of 'kswapd0' (33) because [ 1002.029706] cache 20496kB is below limit 65536kB for oom_score_adj 12 [ 1002.029706] Free memory is 22568kB above reserved [ 1002.054414] lowmemorykiller: Killing 'syz-executor.5' (15702) (tgid 15702), adj 1000, [ 1002.054414] to free 52244kB on behalf of 'kswapd0' (33) because [ 1002.054414] cache 20496kB is below limit 65536kB for oom_score_adj 12 [ 1002.054414] Free memory is 27212kB above reserved [ 1002.068859] lowmemorykiller: Killing 'syz-executor.1' (15679) (tgid 15679), adj 1000, [ 1002.068859] to free 52240kB on behalf of 'kswapd0' (33) because [ 1002.068859] cache 20496kB is below limit 65536kB for oom_score_adj 12 [ 1002.068859] Free memory is 51164kB above reserved [ 1002.087435] lowmemorykiller: Killing 'syz-executor.3' (27434) (tgid 27434), adj 1000, [ 1002.087435] to free 51604kB on behalf of 'kswapd0' (33) because [ 1002.087435] cache 20496kB is below limit 65536kB for oom_score_adj 12 [ 1002.087435] Free memory is 54568kB above reserved [ 1002.181376] uinput: write device info first [ 1002.405788] input: syz1 as /devices/virtual/input/input5117 [ 1002.425024] input: syz1 as /devices/virtual/input/input5118 [ 1002.425365] input: syz1 as /devices/virtual/input/input5119 [ 1002.433225] input: syz1 as /devices/virtual/input/input5120 [ 1002.709913] uinput: write device info first [ 1002.744061] lowmemorykiller: Killing 'syz-executor.5' (15774) (tgid 15774), adj 1000, [ 1002.744061] to free 52268kB on behalf of 'kswapd0' (33) because [ 1002.744061] cache 19952kB is below limit 65536kB for oom_score_adj 12 [ 1002.744061] Free memory is -6776kB above reserved [ 1002.818193] lowmemorykiller: Killing 'syz-executor.5' (15794) (tgid 15794), adj 1000, [ 1002.818193] to free 52312kB on behalf of 'kswapd0' (33) because [ 1002.818193] cache 19952kB is below limit 65536kB for oom_score_adj 12 [ 1002.818193] Free memory is -7420kB above reserved [ 1002.823439] lowmemorykiller: Killing 'syz-executor.1' (15747) (tgid 15747), adj 1000, [ 1002.823439] to free 52264kB on behalf of 'kworker/u4:1' (29453) because [ 1002.823439] cache 19952kB is below limit 65536kB for oom_score_adj 12 [ 1002.823439] Free memory is -7420kB above reserved [ 1002.827680] lowmemorykiller: Killing 'syz-executor.3' (15753) (tgid 15753), adj 1000, [ 1002.827680] to free 52252kB on behalf of 'kswapd0' (33) because [ 1002.827680] cache 19952kB is below limit 65536kB for oom_score_adj 12 [ 1002.827680] Free memory is 10180kB above reserved [ 1002.837032] lowmemorykiller: Killing 'syz-executor.5' (15750) (tgid 15750), adj 1000, [ 1002.837032] to free 52248kB on behalf of 'kworker/u4:1' (29453) because [ 1002.837032] cache 19952kB is below limit 65536kB for oom_score_adj 12 [ 1002.837032] Free memory is 14080kB above reserved [ 1002.841193] lowmemorykiller: Killing 'syz-executor.0' (15752) (tgid 15752), adj 1000, [ 1002.841193] to free 52248kB on behalf of 'kswapd0' (33) because [ 1002.841193] cache 19952kB is below limit 65536kB for oom_score_adj 12 [ 1002.841193] Free memory is 23780kB above reserved [ 1002.846709] lowmemorykiller: Killing 'syz-executor.5' (28658) (tgid 28658), adj 1000, [ 1002.846709] to free 51604kB on behalf of 'kswapd0' (33) because [ 1002.846709] cache 19952kB is below limit 65536kB for oom_score_adj 12 [ 1002.846709] Free memory is 50544kB above reserved [ 1002.866788] INFO: task init:32658 blocked for more than 140 seconds. [ 1002.866793] Not tainted 4.9.141+ #1 [ 1002.866795] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1002.866815] init D29336 32658 1 0x00000000 [ 1002.866827] ffff880081714740 ffff8800ab9df900 ffff8801a7244d00 ffff88015bb5c740 [ 1002.866837] ffff8801db621018 ffff880174757738 ffffffff828075c2 0000000000000000 [ 1002.866847] ffff880081714ff0 ffffed00102e29fd 00ff880081714740 ffff8801db6218f0 [ 1002.866849] Call Trace: [ 1002.866865] [] ? __schedule+0x662/0x1b10 [ 1002.866873] [] schedule+0x7f/0x1b0 [ 1002.866881] [] schedule_preempt_disabled+0x13/0x20 [ 1002.866889] [] mutex_lock_nested+0x38d/0x900 [ 1002.866898] [] ? tty_open+0x476/0xdf0 [ 1002.866905] [] ? mutex_trylock+0x3e0/0x3e0 [ 1002.866915] [] ? kmem_cache_alloc_trace+0x117/0x2e0 [ 1002.866922] [] tty_open+0x476/0xdf0 [ 1002.866929] [] ? tty_init_dev+0x430/0x430 [ 1002.866938] [] ? chrdev_open+0xc7/0x5c0 [ 1002.866945] [] ? tty_init_dev+0x430/0x430 [ 1002.866952] [] chrdev_open+0x22d/0x5c0 [ 1002.866959] [] ? cdev_put.part.0+0x50/0x50 [ 1002.866968] [] do_dentry_open+0x3ef/0xc90 [ 1002.866975] [] ? cdev_put.part.0+0x50/0x50 [ 1002.866983] [] vfs_open+0x11c/0x210 [ 1002.866991] [] ? may_open.isra.20+0x14f/0x2a0 [ 1002.866998] [] path_openat+0x542/0x2790 [ 1002.867006] [] ? path_mountpoint+0x6c0/0x6c0 [ 1002.867014] [] ? trace_hardirqs_on+0x10/0x10 [ 1002.867023] [] ? expand_files.part.3+0x3a9/0x6d0 [ 1002.867030] [] do_filp_open+0x197/0x270 [ 1002.867037] [] ? may_open_dev+0xe0/0xe0 [ 1002.867045] [] ? _raw_spin_unlock+0x2c/0x50 [ 1002.867052] [] ? __alloc_fd+0x1d7/0x4a0 [ 1002.867060] [] do_sys_open+0x30d/0x5c0 [ 1002.867068] [] ? filp_open+0x70/0x70 [ 1002.867075] [] ? _raw_write_unlock_irq+0x27/0x50 [ 1002.867083] [] SyS_open+0x2d/0x40 [ 1002.867090] [] ? do_sys_open+0x5c0/0x5c0 [ 1002.867098] [] do_syscall_64+0x19f/0x550 [ 1002.867105] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1002.867109] [ 1002.867109] Showing all locks held in the system: [ 1002.867117] 2 locks held by khungtaskd/24: [ 1002.867133] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 [ 1002.867148] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 [ 1002.867158] 1 lock held by rsyslogd/1896: [ 1002.867172] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 [ 1002.867176] 2 locks held by getty/2023: [ 1002.867189] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 1002.867201] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 [ 1002.867207] 1 lock held by syz-executor.1/2069: [ 1002.867219] #0: (tasklist_lock){.+.+..}, at: [] do_wait+0x392/0x950 [ 1002.867235] 2 locks held by kworker/1:11/19954: [ 1002.867249] #0: ("events"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 1002.867261] #1: ((&ns->proc_work)){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 1002.867339] 1 lock held by init/32658: [ 1002.867352] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 1002.867356] 1 lock held by init/32659: [ 1002.867368] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 1002.867371] 1 lock held by init/32661: [ 1002.867382] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 1002.867386] 1 lock held by init/32662: [ 1002.867396] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 1002.867399] 1 lock held by init/32663: [ 1002.867408] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 1002.867410] 1 lock held by init/32666: [ 1002.867418] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x476/0xdf0 [ 1002.867456] 1 lock held by syz-executor.1/15779: [ 1002.867469] #0: (input_mutex){+.+.+.}, at: [] __input_unregister_device+0x152/0x490 [ 1002.867472] 1 lock held by syz-executor.3/15792: [ 1002.867481] #0: (input_mutex){+.+.+.}, at: [] __input_unregister_device+0x152/0x490 [ 1002.867485] 2 locks held by syz-executor.0/15824: [ 1002.867497] #0: (&type->s_umount_key#4/1){+.+.+.}, at: [] sget_userns+0x552/0xc40 [ 1002.867507] #1: (shrinker_rwsem){++++..}, at: [] register_shrinker+0x8e/0x180 [ 1002.867508] [ 1002.867509] ============================================= [ 1002.867509] [ 1002.867513] NMI backtrace for cpu 1 [ 1002.867519] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #1 [ 1002.867529] ffff8801d9907d08 ffffffff81b42e79 0000000000000000 0000000000000001 [ 1002.867538] 0000000000000001 0000000000000001 ffffffff810983b0 ffff8801d9907d40 [ 1002.867546] ffffffff81b4df89 0000000000000001 0000000000000000 0000000000000002 [ 1002.867548] Call Trace: [ 1002.867557] [] dump_stack+0xc1/0x128 [ 1002.867566] [] ? irq_force_complete_move+0x330/0x330 [ 1002.867574] [] nmi_cpu_backtrace.cold.0+0x48/0x87 [ 1002.867581] [] ? irq_force_complete_move+0x330/0x330 [ 1002.867588] [] nmi_trigger_cpumask_backtrace+0x12c/0x151 [ 1002.867596] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1002.867601] [] watchdog+0x6ad/0xa20 [ 1002.867607] [] ? watchdog+0x11c/0xa20 [ 1002.867615] [] kthread+0x26d/0x300 [ 1002.867622] [] ? reset_hung_task_detector+0x20/0x20 [ 1002.867628] [] ? kthread_park+0xa0/0xa0 [ 1002.867635] [] ? __switch_to_asm+0x34/0x70 [ 1002.867641] [] ? kthread_park+0xa0/0xa0 [ 1002.867647] [] ? kthread_park+0xa0/0xa0 [ 1002.867653] [] ret_from_fork+0x5c/0x70 [ 1002.867659] Sending NMI from CPU 1 to CPUs 0: [ 1002.868040] NMI backtrace for cpu 0 [ 1002.868043] CPU: 0 PID: 15750 Comm: syz-executor.5 Not tainted 4.9.141+ #1 [ 1002.868045] task: ffff8801a780c740 task.stack: ffff8800651c8000 [ 1002.868049] RIP: 0010:[] c [] __list_del_entry_valid+0x89/0x1a0 [ 1002.868051] RSP: 0018:ffff8800651cf588 EFLAGS: 00000046 [ 1002.868053] RAX: ffffea00048ba0a0 RBX: ffffea00046dbf20 RCX: ffffea00048ba0a0 [ 1002.868056] RDX: 1ffffd40008db7e4 RSI: ffffffff8143c19d RDI: ffffea00048ba0a8 [ 1002.868058] RBP: ffff8800651cf5a0 R08: ffffea0001f800a0 R09: 2db45dc6a21baa3c [ 1002.868061] R10: ffff8801a780c740 R11: 0000000000000001 R12: ffffea00048ba0a0 [ 1002.868064] R13: ffffea00048ba0a8 R14: ffff8801d6b35c28 R15: dffffc0000000000 [ 1002.868066] FS: 00007fd242935700(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 1002.868069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1002.868071] CR2: 00007f506a771518 CR3: 00000001ad587000 CR4: 00000000001606b0 [ 1002.868074] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1002.868076] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1002.868077] Stack: [ 1002.868080] ffffffff833d3600c ffff8801d6b35c20c ffffea00048ba080c ffff8800651cf680c [ 1002.868083] ffffffff8143c1a9c ffff8800651cf5c0c ffffffff81243c87c ffff880000000001c [ 1002.868085] 1ffff1000ca39ebfc ffffea0000000002c ffff8800651cf618c 0000000000000296c [ 1002.868087] Call Trace: [ 1002.868089] [] release_pages+0x579/0xaa0 [ 1002.868092] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1002.868094] [] ? put_pages_list+0x270/0x270 [ 1002.868096] [] ? check_preemption_disabled+0x3b/0x200 [ 1002.868099] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1002.868101] [] free_pages_and_swap_cache+0x117/0x160 [ 1002.868103] [] tlb_flush_mmu_free+0xb4/0x150 [ 1002.868106] [] unmap_page_range+0x106a/0x1680 [ 1002.868108] [] ? do_wp_page+0x2010/0x2010 [ 1002.868110] [] ? uprobe_munmap+0x94/0x220 [ 1002.868112] [] unmap_single_vma+0x11c/0x170 [ 1002.868114] [] unmap_vmas+0x81/0xd0 [ 1002.868117] [] exit_mmap+0x1cc/0x3a0 [ 1002.868119] [] ? SyS_munmap+0xa0/0xa0 [ 1002.868121] [] ? __might_sleep+0x95/0x1a0 [ 1002.868123] [] mmput+0xcd/0x360 [ 1002.868125] [] do_exit+0x6c9/0x2a50 [ 1002.868127] [] ? __sigqueue_free.part.2+0x51/0x60 [ 1002.868130] [] ? release_task.part.4+0x14b0/0x14b0 [ 1002.868132] [] ? __sigqueue_free.part.2+0x51/0x60 [ 1002.868134] [] ? __dequeue_signal+0x79/0x5f0 [ 1002.868137] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1002.868139] [] ? recalc_sigpending+0x72/0x90 [ 1002.868141] [] ? dequeue_signal+0xc4/0x4b0 [ 1002.868144] [] ? check_preemption_disabled+0x3b/0x200 [ 1002.868146] [] do_group_exit+0x111/0x300 [ 1002.868148] [] get_signal+0x4e1/0x1460 [ 1002.868150] [] do_signal+0x95/0x1b00 [ 1002.868152] [] ? __vfs_read+0x560/0x560 [ 1002.868155] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1002.868157] [] ? setup_sigcontext+0x7d0/0x7d0 [ 1002.868159] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1002.868162] [] ? do_futex+0x1a30/0x1a30 [ 1002.868164] [] ? exit_to_usermode_loop+0xbe/0x150 [ 1002.868167] [] exit_to_usermode_loop+0x10e/0x150 [ 1002.868169] [] do_syscall_64+0x3e2/0x550 [ 1002.868171] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1002.868179] Code: c00 c02 c00 c00 c00 c00 cad cde c48 c39 cc3 c74 c73 c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c48 c89 cda c48 cc1 cea c03 c80 c3c c02 c00 c0f c85 cf3 c00 c00 c00 c48 c8b c03 c<48> c39 cc8 c75 c6f c49 c8d c78 c08 c48 cb8 c00 c00 c00 c00 c00 cfc cff cdf c48 c89 c [ 1002.868673] Kernel panic - not syncing: hung_task: blocked tasks [ 1002.868680] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #1 [ 1002.868690] ffff8801d9907cc8 ffffffff81b42e79 ffffffff82a78560 00000000ffffffff [ 1002.868698] 0000000000000000 0000000000000001 dffffc0000000000 ffff8801d9907d88 [ 1002.868707] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 1002.868709] Call Trace: [ 1002.868717] [] dump_stack+0xc1/0x128 [ 1002.868723] [] panic+0x1bf/0x39f [ 1002.868729] [] ? add_taint.cold.5+0x16/0x16 [ 1002.868736] [] ? nmi_trigger_cpumask_backtrace+0x102/0x151 [ 1002.868743] [] watchdog+0x6be/0xa20 [ 1002.868749] [] ? watchdog+0x11c/0xa20 [ 1002.868755] [] kthread+0x26d/0x300 [ 1002.868762] [] ? reset_hung_task_detector+0x20/0x20 [ 1002.868768] [] ? kthread_park+0xa0/0xa0 [ 1002.868780] [] ? __switch_to_asm+0x34/0x70 [ 1002.868787] [] ? kthread_park+0xa0/0xa0 [ 1002.868793] [] ? kthread_park+0xa0/0xa0 [ 1002.868799] [] ret_from_fork+0x5c/0x70 [ 1002.869332] Kernel Offset: disabled