:0: [sr0] tag#0 unaligned transfer [ 1535.352505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.353742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.355118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.356276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.357389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.358763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.360187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.361287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.362698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.363933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.365074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.366480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.367586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.372015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.373212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.374602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.376049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.377501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.378738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.388472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.394074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.395168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.396332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.397435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.398597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.399969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.401146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.402257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.403685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.405108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.406248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.407795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.409174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.410394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.411979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.414808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.416047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.417535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.418979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.420188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.421719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.423091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.424352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.425876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.428812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.430033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.431527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.432985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.434153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.435359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.436933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.438184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1535.449719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 04:34:44 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmctl$IPC_RMID(r0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:34:44 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x8, &(0x7f0000ffb000/0x5000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x6000) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8010, 0xffffffffffffffff, 0x7) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r3 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r4 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(r2, &(0x7f0000ff4000/0x4000)=nil, 0x2000) r5 = shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmdt(r5) shmat(r3, &(0x7f0000ff5000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r1) shmget$private(0x0, 0xd000, 0x4, &(0x7f0000ff3000/0xd000)=nil) shmdt(r4) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:34:44 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) r0 = shmget(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x3000) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffb000/0x1000)=nil) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3, &(0x7f0000ffc000/0x4000)=nil, 0xe) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x3000) r2 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x5f93b63aa292b4cf) shmdt(r2) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x64) shmctl$IPC_RMID(0x0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:34:44 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmdt(r1) 04:34:44 executing program 0: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe8b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa7e}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4b1}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb975}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x96a1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000891}, 0x4084) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x43) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r3}, './cgroup/cgroup.procs\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}}, 0x240000d8) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x128, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004c00}, 0x404004c) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:34:44 executing program 7: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1, 0x0) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff9000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r1 = geteuid() r2 = gettid() tgkill(0x0, r2, 0x80000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6}) r5 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r6, r5, r5, r7, r5], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r4, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r7, r8, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:34:44 executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0xc10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000004c}, 0x40010) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/usblp', 0x88c02, 0xc) ioctl$PIO_FONTX(r2, 0x4b6c, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00010420", @ANYRES16=r3, @ANYBLOB="00002cbd70000000000006000000080034000000010408000b0000000000050038003f000000000000004bb543d54360d07b391a57d6697bb57cfc22ff9519746f4219f502b100fee811caf8f4c41907d664454371327f49b88eca1d3681f8ed38752896c846379d1da540ed1e44f40b77b88716da03f2397fa9a7adc17746f09c2586f22af2588c5559640e63e37dc8008f245c9421b679da2025a9e583b50458a4d92c97c3ad1695e5d4bc15b3d6d203d999a8ddaa1befde67680fd17d0e992d428ca24681dcc4188d4a6b31"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0xc10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000004c}, 0x40010) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/usblp', 0x88c02, 0xc) ioctl$PIO_FONTX(r6, 0x4b6c, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00010420", @ANYRES16=r7, @ANYBLOB="00002cbd700000000000060000000800340000000000089fd080e1ca77c22d4f7b282bf9000b00000000000500380000000000"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="43e80001", @ANYRES16=r7, @ANYBLOB="100c2dbd7000fddbdf250600000008000600", @ANYRES32=r8, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB="0500380001000000080031000200000008003100010000000500290000000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000004c}, 0x40010) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x258, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x40}, 0x48084) r10 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3d70720300000000000000"]) mknodat$loop(r10, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:34:44 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="0180", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./cgroup/cgroup.procs\x00']) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002cbd7000fbdbdf2548e59904577675d72d93d8652aaa05000000440009800800010005000000080001000010000008000200000400000800020048690000080001000000000008000100020000000800"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './cgroup/cgroup.procs\x00'}) ioctl$TIOCNXCL(r0, 0x540d) r5 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffff19010000000000000000"]) mknodat$loop(r5, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:34:44 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:34:44 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1000009, 0x80010, 0xffffffffffffffff, 0x106c3000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) [ 1544.646833] tmpfs: Unknown parameter 'ÿÿÿ' [ 1544.659525] tmpfs: Bad value for 'mpol' 04:34:44 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:34:44 executing program 6: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1544.739027] tmpfs: Unknown parameter 'ÿÿÿ' [ 1544.744030] tmpfs: Bad value for 'mpol' 04:34:44 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget(0x2, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x1000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r4) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:34:44 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x80080, &(0x7f0000000180)={[{@cpuset_v2_mode}, {}, {@name={'name', 0x3d, 'prefer'}}, {}, {@xattr}, {@noprefix}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'tmpfs\x00'}}]}) 04:34:44 executing program 5: mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:34:44 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ff8000/0x3000)=nil) madvise(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x14) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/104) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:34:44 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r1 = shmget(0x1, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x5000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:34:44 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=trefer:0,\x00']) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:34:44 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1544.967455] tmpfs: Bad value for 'mpol' 04:34:44 executing program 2: getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/144) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmdt(r0) shmdt(0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x5000, 0x2, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x5000) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_LOCK(r3, 0xb) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x800) [ 1544.974122] tmpfs: Bad value for 'mpol' 04:34:44 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x80, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000fec000/0x14000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:34:44 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:34:54 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x81, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000180)="32949d87f16088c0a0451ecfc5b86c7a0c69683707740e292c4aaf9f1addb65336692ceb5d1e9642d2cbbbb1302e7323be596f6fbfdcd3073b57d2cc8a06c5e47e07dec3a7ab00f12b4828d6c5a7e51b8676f0880ee794330afa40d4910b4bcfa50b0f9de754a09ff96f98790d4969d90e00a44f4643b5181dc06c68be7f05bf93", 0x81, 0x3f}, {&(0x7f0000000240)="23d78b30fbb913e2f0fb492e80eba1e94883d019918be060b4fe1fe8a1c15de87afd11d6d40d4701c1062608dfc5b7b8f6bb13b2cdecdff550847843430f03fab412d217aef359b1a1fa6f08a836666e154111b4a6304f7e7ae85b9d8396890802597df626ffc77f8f1ee16f9a8250e7bd51052307a1320b1f", 0x79, 0x8}, {&(0x7f00000002c0)="b557fc5763765e5d21ea15539a6c2764db7c49d8be7fb6c8ac0e06b2e24e118a9aea79a1762102d415754e543289d531d873b62cc8bb40c1f3fd6e8a06c64be26205d2362cd7cabe25b3b77901bae1a896803bb35d4005b986cf155bd75a55629f2368c3b5ef28e1b5420ffb7210efbc52c8b2ccb84054a2c18346cf6f5fad63a84c17c580051240226151852d3c4a2ad92c223c1b9f38b153257342e5696106b9607cadac15ce77230ae6595be89a7366bfdc4641326421f6d17cdff5a033b6524c9fd9643f5e554eb3efa801a7f5b7cb6669bc3e810d446da17844f4b74cf3aaea446e56808dbec760815ff4fa0c603696", 0xf2, 0x7fffffff}, {&(0x7f00000003c0)="e24afb9083ec331ef5a68bcf9166c1e401c196a41950056ca7faed5116b94bf2e14c362e6b0bde348ba88cbd448597ba2b513cfc0db2fdd5d61baf3cf4087370f6e6077d7958a55f080422cd7b0e6f1d248b826b20a5824fcbb75f6b684616144039a100ff775c39a72e6aaa6df08e44248504a40501ba011e16ec5854cd1260a53e45dcaa6e82f726ef779ac412816019d6abb67f2f3252dca9ff0df003ca0d5177588572009ed40858a115293a610c0876f064a2db4a6bc87c5120dd140b5f87f8545832ed7308451f503208703d1532f81260", 0xd4, 0x6}, {&(0x7f00000004c0)="b23f4e711361518221198e569765755263fe3fb7cff92f96a195767a03d6f936e142bce748232152e3865e476d07f068d24f4b0757b3a702b3863effe6ebe185811f15df052811c491582b231d1a9b549ff31128549a17b3a443ad1d93dbbcf80b372ce0343dc1db45ff672ff3fbd6e32ecc12eae20a7836ef3bca5ec967a9372eedfeaa82ed5bee742177a2d9b34115bc8d535c6aafac6105db7bc034f726e432567cf7412772968e3fef7b5b773f18c06dc91b67922f1477b41e25aec0e130388ec1810c66df228d188401697eb474be32a4bb430e0c58011cf33b5131495d5b9cf950bde363cc5204c6430e21b7a433d51f2407d298", 0xf7, 0x100000001}], 0x2000, &(0x7f0000000640)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x67]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x30, 0x38, 0x25, 0x6b, 0x37, 0x46, 0x32, 0x6d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x38, 0x65, 0x6b, 0x38]}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, 0xee00}}, {@huge_always}, {@mode}, {@nr_blocks={'nr_blocks', 0x3d, [0x30]}}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'tmpfs\x00'}}]}) faccessat2(r1, &(0x7f0000000740)='./file0\x00', 0x88, 0x200) 04:34:54 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:34:54 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 04:34:54 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget(0x2, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:34:54 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 04:34:54 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:34:54 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)="599bfd3e75ac1f7212409e7636c7f8ac3474b665eaddf039baf2c6368dbcc605ea6e9c203d1418a89212ef34558154f03324044672bb8babd926922f9a88e6286a51f130e64b45eb3618ae89961d8a083a606b2344ee39b3a71d5b274e36bcd42a741bf3442bdd7c9f8214e3b9af645775831a8fdc39f857501a6225ce55711469a6bc18dac7f38069b023a2a577ecce2ed9b7581a227cead9570f041a90cf50829eb1ba5fd4983de487286f706aaeea61c7288d35d24694d47695e8557dde7ffa70960a4d3c7e", 0xc7, 0x0) 04:34:54 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r3}}, 0x6) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r2}}, 0x60) r4 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1555.103955] loop5: detected capacity change from 0 to 264192 [ 1555.131398] loop5: detected capacity change from 0 to 264192 04:34:55 executing program 2: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:34:55 executing program 6: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/82) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x6000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 04:34:55 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) 04:34:55 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff1000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/4096) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000001000)=""/207) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:34:55 executing program 3: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/76) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:34:55 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x245, 0x4}}, './file0\x00'}) faccessat2(r3, &(0x7f0000000140)='./file0\x00', 0x0, 0x1680) 04:35:07 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) 04:35:07 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:35:07 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/214) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x5000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:35:07 executing program 5: mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = syz_mount_image$nfs4(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x9, 0x1, &(0x7f0000000600)=[{&(0x7f0000000540)="5d9737b48b3cdc192c49275af5d6d682f5edd5a97bfaa61e6e35e5b8b551d1b8a7c12985e2838074305f1bdbf0d0fa482fbfad62f4f451cb94e3c1f28f518742337e410df521ea55ffb048b4026d0c37dd20a5cbbfd6025a26e2dcf5f8855249d644cce68f256fc21c4e9b3499137e4aa95425b42ca37f353f5624df001a94d43bc8c50843e8064584c32b40f67cd7a2f42103243640ae15b6874ce8921a01975ccd6559bf09d79e04706b26a0aeb355f4", 0xb1, 0x100}], 0x820040, &(0x7f0000000640)={[{'nfs\x00'}, {'\x00'}, {'-'}, {'\x00'}], [{@seclabel}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'nfs\x00'}}, {@subj_type={'subj_type', 0x3d, 'pcr'}}, {@seclabel}]}) statx(r0, &(0x7f00000006c0)='.\x00', 0x1000, 0x800, &(0x7f0000000700)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x4, 0x1, 0x0, 0x81, 0x4, 0x1}, 0x7) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = syz_mount_image$nfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3, &(0x7f00000003c0)=[{&(0x7f00000001c0)="f8db55d434f47498de74b40bbd08155832e743ffe52841853d9e2cdf55698a1f7a2e4d8b08d58f1b55982273e56da96d0a6f31bf285a55481fb3c4448a8389e8572e23e5d7eb119da9f180cb00855c6cbad574880e369aad3061b367a8deb5e7d439ad230a64ce4a47436c64e6d87647c1d01a3ea03dcd7ec31c4f12fa5a8e28b1a5dcb2a75f71aef9858152b005be61", 0x90}, {&(0x7f0000000280)="ea40f7e2befcc79a40", 0x9, 0x1a}, {&(0x7f00000002c0)="8ed6141e3df8cbf9bbb383734835e2c5e6177fc3210a0fea53fd100621f061e9b212bc8c84d5be670ceeea2d1c7ab221c83927047635eb66bb450a0003b1b7ca8cbf1ae62e7b4eef10f0e1b44dcd41da17f985dd1e42639bd451b1db560767d53cfec0ef50e8bf63d7b5a0ff75cf446be3fcbbdbc5847218c8c69f9b8dc14e1ac70c7531ba0fd94d6cba36e7528c61b303d94cabb3a92503a481468c8c8264640680f149933e6558408192d84fb4a64c8c9ec44f008d21939e1f482aa0621086759f694d84abc7a284858aa7ee8d8638", 0xd0, 0x5}], 0x4, &(0x7f0000000440)={[{'\x00'}, {}, {'\x00'}, {'\x00'}], [{@pcr={'pcr', 0x3d, 0x2f}}]}) unlinkat(r1, &(0x7f0000000480)='.\x00', 0x200) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xb4a) fcntl$setsig(r1, 0xa, 0x3) 04:35:07 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3800) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:35:07 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2020012}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 04:35:07 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0xffffffffffffffff) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) shmdt(r2) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:35:07 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r2}, './cgroup/cgroup.procs\x00'}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000300)="28bc9c3d575db8a1b8fbffb00b3ce5dc72dd507669fb4851922f0a965b1788cdbe05c2df9f59b90565481b9879e510689a32ba6bd1701448bfb94a1462796af8b556374adbf4ea1e0d1671e3e63321ab15451bdf36ac452a36842bcb9947c29948353b4545218a9e9de4d28c816135809ffb36cffb1b29a553650d21e730b5ff142ab435f477bbfd6fbabeb7979be8f6699df6f931a682f0d5f6407359b36c7c117635948ed88c69b0f5", 0xaa}, {&(0x7f00000003c0)="b3630c89364eb889bdb784dd0867cbc7da5a8523f0a9ead1aef1ebcf48f145d7259daa51d177", 0x26}, {&(0x7f0000000500)="8965b9cf0802fc089b70d509929310d4dc0cb0418c2a270b66fb0746bbf1ce206d2ade0d2a1a339ee30d6ae19dd6683699ae21e439461e58f6d61949463c6598333f6adf593e5ecd58fc940c900d5a62f7615cb5b6969db2cd5d7bf3f08b8a73f7de7ce3ca31cb2a8d0aa893ddf81f2a79e85ba787739cac8968aaa53504bd6c576106f01e4305e02f666bc365fb8caa5e43d83af039", 0x96}], 0x3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8bb}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004811) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=p\x00']) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x3, 0x0, 0x4, 0x8, 0x7e, "02a0dd7353b4c92fcde285ab05d1397fb51647df44003ccf2e4256d2a09e714236240ad95d9e78a2c72de4138ed650d09c9a0c803d695e29b57fe43aaa97c93c4c73039f5a0da0d15fefc25e8d64870fc48521f06f1eb50fb090ee51f5aa73c07e1c0de14adbc95069e2ead2cca85b81f17c4319fe5f6f34291bc41bf063"}, 0x87, 0x1) [ 1567.335424] tmpfs: Bad value for 'mpol' [ 1567.353996] tmpfs: Bad value for 'mpol' [ 1567.381447] loop5: detected capacity change from 0 to 1 04:35:07 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x1000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/94, 0x5e, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x40) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x5000) r4 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000340)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @empty, 0x3, 0x1, 0x800, 0x400, 0x8001, 0x302}) r6 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r5, r4, r4, r6, r4], 0x6}, 0x58) fcntl$setown(0xffffffffffffffff, 0x8, r6) [ 1567.447985] loop5: detected capacity change from 0 to 1 04:35:07 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0xc0000) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x31]}}}}], [{@smackfsdef={'smackfsdef', 0x3d, ')@'}}]}) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000100)='.\x00', 0x6000, 0x1) 04:35:07 executing program 2: r0 = shmget(0x1, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:35:07 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmctl$SHM_LOCK(r0, 0xb) 04:35:07 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000180)={[{@subsystem='devices'}, {@subsystem='hugetlb'}, {}], [{@appraise_type}]}) [ 1567.584607] tmpfs: Bad value for 'mpol' 04:35:07 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x20, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x36]}}}}]}) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x2, 0x208, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x136) [ 1567.624928] cgroup: Unknown subsys name 'appraise_type' [ 1567.649238] cgroup: Unknown subsys name 'appraise_type' 04:35:07 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) [ 1567.715300] tmpfs: Bad value for 'mpol' 04:35:07 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:35:19 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r1 = geteuid() r2 = gettid() tgkill(0x0, r2, 0x80000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6}) r5 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r6, r5, r5, r7, r5], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r4, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r7, r8, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:35:19 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, r1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:35:19 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 04:35:19 executing program 6: r0 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/4096) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000001000)=""/153) 04:35:19 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x204, r0, 0x1, 0xa897, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8e, 0x5, "ce9b6233a457b12547e38d61760e105c06a02980eabda143bc39cef6d4fcf173e2d04c51e8c53355c79a11e61a8aece4fec540f0880b7e40f6597a5236f7105c62a978e0ef4c43a3af79fecc7d92b51659f966487d0d49f936e112887402d1551cab8c5e5feb8b4da91f76aadd2f1aba72b5050be483095fca916667d37c215e84be466533d8df1b7344"}, @ETHTOOL_A_BITSET_MASK={0xce, 0x5, "59d51e98188d48aab330738f275bb548fa2c0e34814d84913d240632c69e6afed7618dde42dea52fd39c5cc80647dc8cbca35b1d8d9c2caa65e44fb8a33e18a9bf685097b001c888663c4a7e6a6745c99e50af458d92104d01adfe5175f9c1f60c1564946d9b5da0312902169626cdcbc2e6c31b2440b5a13fadbeb7082ac97bc414b9ba2a7b71fa6b84482595b579efb545fff7d8e752add4c99430ed3658a72a786dfe1f46412646532585ddf807cfaf2f916a7e93b4111dee78a4cc1f52b7e3d646256958f7e8d9b3"}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tmpfs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaafb}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'prefer'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':#@\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'mpol'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(/@$:)+\x00'}]}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004051) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000010c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000000500)={0xb70, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x848, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "635f3e58618020643a161cdcff834edaf46f719b45ef2e13c56adc2d5fe51b6b"}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xab, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3a}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2b96f9a16f0793db566b8a3ecc9a360b0587065359e83168c113b82fea1e2ed3"}]}, {0x268, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xb81, @dev={0xfe, 0x80, '\x00', 0x2c}}}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0xab}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "030a005e123966053b788bdd620e49b80cfd72c9d243f190cfc3a034b4710368"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x4ac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0xc0}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x80000000}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x2bc, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "20f4cf0ad0d625a8565158df9f80b9831c48f980217547fdae273afc88fc40aa"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xcccc}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "44f1e9752a9867a4227eb3c55f53158ca48bcac7496a9ab376c1e35ff5941688"}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xcb, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "003415f824fdea0180bfa1bcb2c34f19717548bd5e7b56a15b283d3542500263"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @broadcast}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @remote, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @private2, 0x29f6}}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}]}]}]}, 0xb70}, 0x1, 0x0, 0x0, 0x80}, 0x90) r5 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/15]) mknodat$loop(r5, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1579.255065] tmpfs: Unknown parameter 'mpo¯0' 04:35:19 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/192) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x20010, r0, 0x2) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x15) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x600000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12) 04:35:19 executing program 1: setuid(0xffffffffffffffff) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="6d706f13af302c00b3350fe16a18495632c3635e56d0e0dc2a771466b789c224f21f4a71e0b4a2c0ed5480c9a66fdab1c9"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r2) setresuid(0x0, r3, 0x0) setfsuid(r3) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2, 0x8, &(0x7f0000001680)=[{&(0x7f0000000180)="536d88e826a8777d10960802be20f7f93563d5c56ad23dffa564b775fc4ee58b5544389966ffc10c96cf504db2122a6fc141fad14c22f7f8143ea24d848c0c8cae31ecdcec53592c01e079a7d636a9d86dfd0812b0196357e055e90734274d6f84308236da0fbad00a79878d317f93e6330f24885deaccd5c51483f673f53d7d053b292c0dcac61b67a245b2420a64130f017306cc9c69ea4323357db1bce37f1468509ba07d5ce2e8a7d3da36fde2f9eb9651743f142b068d85", 0xba, 0x7fff}, {&(0x7f0000000240)="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", 0x1000, 0x6638}, {&(0x7f0000001240)="eed96cbc0ff7c8885236a76a9edff6b42e68000188b5595b914b3ce28b42f5b33af00fc81120eca5c8378bae8c7fc376cc0f566e99ba8525e35af94cd902295d4fb66e12416d901668cb84eadbee8f98e96b1fb684a87a5b09e1948d43bb5baba8019508b552c84b014776ad6f4125176f04d2c121305eb6e52fc207a2d30e1bf7579dc117e4e462cda62c5f7d5922b446ebbf1e9511b437418f0667bd1890dda3c52661", 0xa4, 0x9}, {&(0x7f0000001300)="419472d2d0768d6c7cf994b38e4e9951abd07024646793dd64f07847e0c3ba90b8ebc32728c3a93b3ce99750ef0fed33e567bf6320b4f423cacbdb27356d7b0a9b95d835154c2b8fd1bd0b6fe09ab061c71542d12370d811200829e0e13c7c37b2d4068ab74a31c9555e867e2e693684de42ecd0c3e93e726976aaf6f576ccf2e36b75d63cfd926e8c0590e26cd8e2c144cdd09409e2720ec212a53890ac41a328b73f0b58406ace1d0c0d54fd5f0d1cbaf271c78e78578fdb13e67d35a94557a8ebda72294191db180006be19dc16a6c8d3b2624a18eb66779823ded1e333c59d947f4ee425a9e7c29f97daaa718ed3a69b4645d203046da339e09e25dd", 0xfe, 0x7}, {&(0x7f0000001400)="01a04fac81c9386701a60e7a35703fea8f44968a371dd1d8753905c0e598ed9d5c05d2eccb25ea76b584b1cb604ae79af54d5708ee0b", 0x36, 0x709d}, {&(0x7f0000001440)="938ba59f089065916178f3cfd882a58a06840d670408053c68e9cb831d08accda9db81cb8ca943c8dcd6061b36a308db052b3a49da1b6ab0353228855ea1ea86b42df473011d54c8c038f2eef56a63d4930be8035424a593cf17b7f9dcd6d529b12be829ffdb25dfed6912eb25e3f932ad26dd15d595a7340677bb9ae825f6f7785918916d410f80e628e2eae18eac1a515aed38edac865067c5334796292f5a6e59ff321e48c12bdd7f9e9fbddc9e9b93bb293030ae4276f679ae952bdf2f3d23baf14bb43ca80771f6196e1495903897a905ff4a1439af77537ebb5a88afef6106b7ba95d4b6083841a794f3b3e4f4fac7ead0b087", 0xf6, 0x732}, {&(0x7f0000001540)="b46cec1aa342d58c5d0e71701e7dcf621df4fb1f5cb763128fa30c66a1a8f933f7837ea11b92579f8e13b93ca8826f40ab0eccfa126d6cfd5994c2ca435f66b1164115d299ca2a57e41b99e8e87e56dfaa7ef9d09b368bcfd35bcecb230ab68f6365c8f37334be56f4972dfacb0046ae3ad1331209e017a117a03e1975dd2e2bfb0284639303", 0x86, 0x6}, {&(0x7f0000001600)="ab0f3569e2cfc28862b7db73c99457c01d8c3e88dd607d1a59856811ac9204dc9f0ca268316ca56aaef403ce0536ddab161d0869b1c836842d0d5093b16b1f5db95786cdffced8c9eae6ed5e19e2f4e03ed62213afa90cbe63f150553f27301ea4a19a55d99eda9966b8ea", 0x6b, 0x1}], 0x24805, &(0x7f0000001b00)=ANY=[@ANYBLOB="2b22287a3c08352900d2978442c0b01d38564ff05dd76007189a500000ca7c36e79d95e0bfc24579b660ed22084dc78286b17ef1b1ecf5bafd04e16308ea5a44f8e6ae51906da3cdbf2b5cad3597e99764008a85f53c5388cae4993b1d8af04516ec55960542210f7bd10600b6f99ff5d76eff48d08bbfb265848b812ecb50e36513d65b410b0a2d7b4e077fba27e84fa234904ff59a87f132fdc5d4b97d2c5b5d4025257d215e2c3a2e402a262c746d706673002c746d706673002c7569643c", @ANYRESDEC=r2, @ANYBLOB="2c7065726d69745f646972656374696f2c657569643df1c140b1f365dcdf8f8e7c85e7b9068476608fc49443b3348878aa82d4f7d938aba82fe400000000d84d2b5cac0b6e28e7b2b7f195daa20a3c931646ce77000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC, @ANYBLOB="2c66736e616d653d2b6214c84e4b544554b0d0dfe5903b19d86bcc154104c3828d58277c01e796b844b359158986bd5a4dfe0ff3550bbc225b9295696c75940481736c4905ec9631edd1efc09e1eab54999225ede5a35b09602c61707072616973652c666f776e65723c", @ANYRESDEC=r1, @ANYBLOB=',dont_hash,\x00']) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000001740), 0x400) 04:35:19 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000580)) mount$tmpfs(0x0, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540), 0x80, &(0x7f0000000680)=ANY=[@ANYBLOB='huge=never,mode=00000000000000000000007,size=pt,measure,appraise_type=ima@ig,\x00']) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}}}, &(0x7f0000000880)=0xe8) r2 = gettid() tgkill(0x0, r2, 0x80000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6}) statx(r0, &(0x7f00000008c0)='./file1\x00', 0x1000, 0x10, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x5}, [{0x2, 0x1, r1}, {0x2, 0x1, 0xee00}, {0x2, 0x2}], {0x4, 0x4}, [{0x8, 0x3, r4}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x4, r5}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x2, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x7c, 0x1) syz_mount_image$nfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x4, &(0x7f0000000480)=[{&(0x7f0000000180)="73a33c9361e98d2365ba181419b2590a29a3183ab820dbcb9315337a98914409c3870ef54e142b5691547517bd722152d77187d077399232ba4167ba2987aee2b2f092b025f8e1ed98bde6f8a89cff1697c62ba8fcd2d76e1ec971cc158b4c5e9be8800f39eefa2f4c414149f0f42c2bb8fba2e5b831225f451b780f50ae1fe9ea9379d2f0fac45c3c78d9a74d3b3e6e2af355403663d960f5620380b604529f85e39504a924199875812ca571632e439c32d29565ffcc374d03f1a093fdbe8f6f22b696d8b46c8d0cb4bb80c00b8e7c", 0xd0, 0x9}, {&(0x7f0000000280)="1f4f6efd27c59f3d08138dd4624a44837b9680743775b6990c715ed9ea33226dfc12e0e879673c77d15b3bcdbe9cd9defbef24fa6e0358de3bc468f5082744ab7fb3b6415b4797f367004a8d6d3969698fce01226a57b83710c89989681c30f1204e17a7bfee013e07e1fce14aecc5d5c6cccec0b2637dac620f556fc7f07b1cc1eeb351bb337062075980cd712dc0fd17659aa013c0368f7095dc9696c5c03be3c16743d9a5bd5985ebc2d340ea299c49fff4cfce032286c30ee08289615031ce3f5b", 0xc3, 0xff}, {&(0x7f0000000380)="9b8c221d3fca41864439d73be3e0128aabaf25ca0d4d20add1d110fb964763a3d9176135613abde9513bd120af84bc88086da66aade94c032e69b27dfc4c23a81c8996c3c525a28855d37dc59d6e44a76323d7ff58cf11d99d697061d05f93fe3dd097613df4bf14772fd698e15926a99a3515e9b0a86ecc08d5701157977410ca47045e4e38291f49619c20445f496887c95a0b132e8281eb2fbaae9b43945e76f0608d80380fd6210d", 0xaa, 0x3f}, {&(0x7f0000000440)="c429c6f2a159e23c4e20064c", 0xc, 0x3}], 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="2c6e725f696e6f6465732c7481706673012c746d706673002c7569643d38b4a091a881433ec98b26537c67f3d145c821faa76d64903c083b0d9bd0e7b6695d6a39932ac16f164f8f699ec5fe3cb492e9495b0a3ac07b7db2cc39a264df8063f7b92728ff5bba0b42fd8f", @ANYRESDEC=0x0, @ANYBLOB=',measure,\x00']) [ 1579.311366] tmpfs: Unknown parameter 'ÿÿ' [ 1579.329521] nfs: Unknown parameter 'nr_inodes' [ 1579.341872] tmpfs: Unknown parameter 'ÿÿ' [ 1579.358591] nfs: Unknown parameter 'nr_inodes' 04:35:19 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x6, 0x0, 0x0, 0x8000, &(0x7f0000000100)=ANY=[@ANYBLOB="6d7099ada0ae7cd70b831f536e1efa"]) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:35:19 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:35:19 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) [ 1579.535387] tmpfs: Unknown parameter 'mp™­ ®|× ƒSnú' 04:35:19 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:35:19 executing program 2: shmat(0x0, &(0x7f0000ff8000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x1000) shmdt(r1) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x65) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 1579.546752] tmpfs: Unknown parameter 'mp™­ ®|× ƒSnú' 04:35:19 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x20, 0x2, 0x0, 0xffff, 0x5, 0xff, 0x3, 0x9f, 0xb48, 0x8, 0x3d80, 0xff, 0x101, 0xfffffffffffffffb}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r3, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000200), 0x1000000, &(0x7f0000000240)={[{@cpuset_v2_mode}, {}, {@name}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@xattr}, {@clone_children}, {}, {@clone_children}], [{@dont_measure}, {@hash}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_lt={'fowner<', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@dont_measure}]}) lgetxattr(&(0x7f0000000300)='./cgroup/cgroup.procs\x00', &(0x7f0000000340)=@known='trusted.overlay.upper\x00', &(0x7f0000000380), 0x0) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:35:19 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@huge_never}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) r1 = openat2(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x501000, 0x84}, 0x18) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r4}, './cgroup/cgroup.procs\x00'}) fcntl$getflags(r4, 0xb) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r2}, './cgroup/cgroup.procs\x00'}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2010, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@aname={'aname', 0x3d, 'tmpfs\x00'}}, {@aname={'aname', 0x3d, 'mpol'}}], [{@appraise_type}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'tmpfs\x00'}}, {@obj_type={'obj_type', 0x3d, ']\')'}}, {@audit}]}}) 04:35:19 executing program 6: r0 = shmget$private(0x0, 0x2000, 0x54001070, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/63) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmget(0x2, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/135) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:35:32 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = socket$inet(0x2, 0x1, 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/138, 0x8a, 0x0, &(0x7f00000000c0)=""/88, 0x58}, &(0x7f0000000180)=0x40) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) 04:35:32 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) r2 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x6000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 04:35:32 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='=prVfer:0,\x00\x00\x00\x00\x00']) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x454) 04:35:32 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x20a0c0, 0x2) openat$incfs(r1, &(0x7f0000000140)='.log\x00', 0x10200, 0x12a) 04:35:32 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c0214670000000000301c00"]) setxattr$security_evm(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x9, "7e389e"}, 0x5, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) mount$9p_xen(&(0x7f00000017c0), &(0x7f0000001800)='./file0\x00', &(0x7f0000001840), 0x2800022, &(0x7f0000001880)={'trans=xen,', {[{@access_uid={'access', 0x3d, r2}}, {@cache_loose}, {@posixacl}, {@version_9p2000}], [{@appraise}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x100000001}}]}}) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x4, 0x5, &(0x7f00000016c0)=[{&(0x7f0000000480)="7a24179a8ae05aba575d4eb491befb33907190c026d122302c27266e33", 0x1d, 0x6}, {&(0x7f00000004c0)="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", 0x1000, 0x6}, {&(0x7f00000014c0)="bb5581c68977bb70264f9faa85602d8e17920648ca04adf57623ef5bb708b8456852bb970e4dbb2720786a79d8612e510cd7ad71bd41256af73670f357f30e1615b45fada94eebe3fd5fbb9060311b2fc1518d0405adb38ae3516f07c807e4d5425ebb20e2f24f44f7ece228bb729f63da4e08e3", 0x74, 0x3}, {&(0x7f0000001540)="e5c9e40a367d409b7c456baa3f5d9901e3d6eeebe29410a82a61bce8f72518476ac2eec71e2908fc56a293519af68c5e59afb204138a74d8e5a904d66bea7e71517bb2466639bb7faa882c5f8180225f0ec4e8eef7d2321ef65dd5e38cc6df705a6c16e6393b2e54fe4f770d17818e4d5667964085dde0ecfcc3a16d0208fa2dae22fda6c55dab8dd6", 0x89, 0x1}, {&(0x7f0000001600)="c9ee1cbc89c6eba80309e390ecdb3347e2ec656214f9116e1967697c19361c57fccf089b009cb9ec0a384fe846d0d54ae74f28a35a7913fc0f745fe2458ab26ecb11b4e38782f6839fb9d27a894b5f0cb383ece6a6eaeb8ff03c238b6e19be90536056aca27e10ea46d9e73c43c33fff108c28d27d50b1b3afdd38aa76f16f045795bba1cc5e40a16f7e7a84", 0x8c, 0x5}], 0xa2000, &(0x7f0000001740)={[{@unhide}, {@iocharset={'iocharset', 0x3d, 'cp775'}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/sr0\x00'}}, {@subj_user={'subj_user', 0x3d, '[{'}}, {@euid_gt={'euid>', 0xee00}}]}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r4}, './cgroup/cgroup.procs\x00'}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000001900)=@IORING_OP_SEND={0x1a, 0xbe51acc91e0c02a, 0x0, r4, 0x0, &(0x7f00000026c0)="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", 0x1000, 0x40800, 0x1, {0x0, r6}}, 0x2) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x2, 0x2003, @fd=r0, 0x81, &(0x7f0000000200)="084624f4dfd94c66573e72bead87142f9b8e2fce2a6a43f3053edd2aaa81f79399eddd8760b943f6f31d6ae6d140a466aa94fffa84ca0eb5213ce9b1f4e913ebcb1e2c4d04a67ff5e918b68ff2ed02fcf2c05061d2d2d9814980fd382d75b73caea047dff15bc44b0843c15fd3c5d1f9fde197d0a1817f19e25e0fba71d9fecae4e51503cd8d795b4b3319b737933560b40b6f55c3c2136f1fe2665fa55d2d3001c3cddc24f74fc36a637de895647461ded7f6bc8bc342fb4c8036d97d0da3", 0xbf, 0x0, 0x1, {0x0, r7}}, 0x7d) faccessat2(r0, &(0x7f00000000c0)='./file0\x00', 0x82, 0x1980) newfstatat(0xffffffffffffff9c, &(0x7f0000001940)='./file0/file0/../file0\x00', &(0x7f0000000180), 0x4000) 04:35:32 executing program 7: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r1 = geteuid() r2 = gettid() tgkill(0x0, r2, 0x80000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6}) r5 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r6, r5, r5, r7, r5], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r4, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r7, r8, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:35:32 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:35:32 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) r4 = shmget(0x0, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000000)=""/192) 04:35:32 executing program 1: mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:35:32 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1592.481814] tmpfs: Unknown parameter 'mpolg' 04:35:32 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 04:35:32 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x20000000000006, 0x0, 0x0, 0x9000, &(0x7f00000000c0)={[{@huge_always}, {@huge_always}], [{@subj_user={'subj_user', 0x3d, '!\xff\x82]\xf2\xa4\x02\x9d=O\xf3\xfe\xc4\xb4\xbfV;\xd6g\xe0\xb6\vurIL\xdf2\xa4\xfe\xb5\xa8.\xa1T\rs\x0f\x91\xf9\xc4\x18\xddFXu\xca@\xc6%\xb9>7!fNQ\x8b\x96\x90\xe9\x00\x01\xb2\xa3\x81\xde\xef&{\b\xeb\xac@\xc5\xfb\f\xa9\x13T\x88L\xbc\x8bhK\x9b\x96\xe6\x8d9\xd9z0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6}) r5 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r6, r5, r5, r7, r5], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r4, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r7, r8, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 1592.716969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.717409] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1592.718274] Buffer I/O error on dev sr0, logical block 4, async page read [ 1592.734737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.735246] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1592.736012] Buffer I/O error on dev sr0, logical block 5, async page read [ 1592.753033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.753538] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1592.754433] Buffer I/O error on dev sr0, logical block 6, async page read [ 1592.767665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.768167] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1592.769012] Buffer I/O error on dev sr0, logical block 7, async page read [ 1592.775501] tmpfs: Unknown parameter 'refer:0' [ 1592.778103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.778609] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1592.779497] Buffer I/O error on dev sr0, logical block 0, async page read [ 1592.781992] tmpfs: Unknown parameter 'refer:0' [ 1592.791231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.791847] Buffer I/O error on dev sr0, logical block 1, async page read [ 1592.797421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.799983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.800614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.806769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.807383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.812762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.814751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.821948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.822563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.831466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.832152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.833737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.835495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.837687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.838351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.842076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.843004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.845090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.847087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.848766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.849952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.851722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.853954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.856320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.857137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.865871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.866487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.871197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.873544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.877479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.878351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.879503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.886775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.887459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.889865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.890490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.893820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.896224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.898439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.899359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.907377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.908761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.912238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.913071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.914802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.915900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.916953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.920763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.921386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.923953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.924577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.928591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.932769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.933393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 04:35:44 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000004b858e66ec000000000000000000"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:35:44 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:35:44 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:35:44 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d70656c70b4ff604c7f7c223d7072"]) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x58c2c1, 0x0) pivot_root(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./cgroup/cgroup.pro#s\x00']) faccessat2(r1, &(0x7f00000001c0)='./file1\x00', 0x84, 0x0) 04:35:44 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="2ac52e5b0082ce43e9dd369cd509b9f44064a51c7da46066fd79c58c8e75d44f5ea102eed26f54886b091720e1baecea367e6e1ad5b70b5816feee615e6a94861facba18562e747d6917774a65e495ccb57bc2d27da6b60af4c97694a05724fcabe603000000f009b5d7cf1b3698d5955d99d4a92795ad2e38cc16677a81b67be88bd420ec0495"], &(0x7f0000000180)=""/145, 0x91) statfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/78) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:35:44 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/242) 04:35:44 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/108) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x3000) r3 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x1000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1604.931902] tmpfs: Unknown parameter 'mpelp´ÿ`L|"' [ 1604.939553] tmpfs: Unknown parameter 'mpelp´ÿ`L|"' 04:35:44 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x0) r1 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) 04:35:44 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6d706f6c3d7072656665241ea720e1075f009a5ea2358ca82d1f5d478b8a32"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)='%.-\\}./,\x00', &(0x7f0000000180)='\'%\x00', &(0x7f00000001c0)='prefer', &(0x7f0000000200)='mpol', &(0x7f0000000240)='$%:\'#\xdb-{\xcd@*\'&*%,+$),.,.\x00', &(0x7f0000000280)='(\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='@%[{\x00', &(0x7f0000000340)='prefer'], &(0x7f0000000540)=[&(0x7f0000000400)='tmpfs\x00', &(0x7f0000000440)='tmpfs\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='mpol', &(0x7f0000000500)='\x00'], 0x800) 04:35:44 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20000, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x8, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x84) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="9c2c22cf6c46e10fb534b411b23a31853ee7764b466072468890c795be901f203491f3b8e15108e430e5d522d30f6901b794ed39052278ed1afdfb8bc440b805e13155bbd0987cef86a16be93ae451496fbf3bd44269b09f50f0f641982b2d9f13ef14282f4806275281aa9be19179486ba556c97847df329e4ac2104722d29a2ac277604bbd46a633ca7c4583f882133d775fcf08b8d501fdf86370cf2487928943913d28cdc384b2af8357663c4a091326c92d5b1e49675e15f31811de1793c2938ae36f8625dd0205fcee019d0ed419d7cf6583978ba9f820eb3cae3d", 0xde}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000280)="cb283194ef245566d447aca89e92859d59e904995e45289892ca9d89d407035fcf57bb3e365130214a7a5659141b4afe2df2bccd67", 0x35}, {&(0x7f00000002c0)="4270141a0680c334609af863b55b1d894a1938b18fcf2e8d1288ef986d7b230f344c5273f8ce527db9c2efece6b1ef49b89d2695810460032fd8dddcc54162315fa290d58a187793d9c26a1c35c6e493b73ee1c0e90207608fad442609572aeeac24f4813042cd4219af00c8575f76e00b155d1984b778a7207e3fa80afac024b4e6ee1f8a38ae0781b8362b4e9449a7fc7db132add1d37a9812018cddfa42e88f1dc7e04cb4285c7107be4d21f1db5d8e70e5faa224f2aca009feb85ab3fd6cbde24a613bdd1f47cf5a4d769736085d3bff31a89cb077af6a32a4e9fa1f882822c176bd3aca33b7a68fbc556006701fc714dcf8", 0xf4}, {&(0x7f0000001500)="35e11404c4ee1fb05dd3d361bb874b2a3f7481748880714560859b040642beb5fff7b20c5ae76f923eef7568cac3aa55f47ca422bb4eec09f42c44bd66e852d1c305b4a5e3718f1539489abd6c7549a7e0406d480fbbb1175b4a731213c5eb5f34431f0623bdd7e74ee67945f77de56b9024a03ffd3f245d2737e1d6b242a9f4009d9072b794b1434805a6023068ba0751239d6357d4a51e9d1a7b3512719746106d3fde652690e566b51d4bf61bd5acde263d65d41b40173f6d72fdae63bced4aa7b2fc16", 0xc5}, {&(0x7f0000001600)="62da76573388bc85cef064292b7736787f68215150e246a06088d5492969acb104499e6441111dd984dba1dce35ea51c7f06263f173a0a92f31b785a8037124d07ab30c6106d233e520e3068a5fb235987ebff4588ebd7bbff38b5205d07bb68edd68661ccbef9f480272947fb7f3cd666869b1d075c4848aedd813d810076859cbfc9cd926eebb1a01bc1f2dc35a2b060b49ff3d188c047d5d2fd3aaf257da65acb5f8e19938920bfcf3c83bc7fda6031681e2ad4c7ab737d181439ad7863", 0xbf}], 0x6) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r3}, './cgroup/cgroup.procs\x00'}) move_mount(r1, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x5d) 04:35:44 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:35:44 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:35:44 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x40, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x38]}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1605.093495] tmpfs: Bad value for 'mpol' 04:35:44 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1605.098959] tmpfs: Bad value for 'mpol' 04:35:45 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000800000/0x800000)=nil, 0x800000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000c53000/0x4000)=nil, 0x4000, 0x17) 04:35:56 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:35:56 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x15) 04:35:56 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:35:56 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x80001, 0x80) accept4$unix(r1, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x800) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:35:56 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r2 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) shmdt(r2) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) r3 = shmget$private(0x0, 0x5000, 0x410, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0x4000) 04:35:56 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = shmget(0x3, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmdt(r1) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000000c0)=""/130) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) 04:35:56 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:35:56 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/usblp', 0x88c02, 0xc) ioctl$PIO_FONTX(r0, 0x4b6c, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="00010420", @ANYRES16=r1, @ANYBLOB="00002cbd70000000000006000000080034000000000008000b00000000000500380000000000"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0xc10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000004c}, 0x40010) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48084}, 0x40) r5 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r5, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r6}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r6, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0) 04:35:56 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) r3 = accept4(r2, &(0x7f0000000300)=@x25, &(0x7f0000000380)=0x80, 0x100c00) write$binfmt_script(r3, &(0x7f0000000880)={'#! ', './cgroup/cgroup.procs', [{0x20, '/dev/sr0\x00'}, {0x20, '-#@'}, {0x20, '[*[-&}-@%'}], 0xa, "49a1ff8e518e0913c1a2cb19401f28df6cec67ae93c7f3b1cd6e201791477dce4567bb7a6eff9ab1a2bfc1083e707926489483b1794469f1d8ca553979a538cdbcf8a641243a4f82f8565d4892857ad444ef5d71dbaf297e6d15c57a8fab3bbbf5bb229f8d649f39183768a1f42cc2038e5c14d98f911b2b9d75f11ca81857739140452d045099253388ef3d2c9a0ff2ab0b6ff61848a9493f5bd67d9b4976c7da9db0"}, 0xd4) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3d9272656665723a302c00"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000ea0100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x4202, 0x10, 0x1}, 0x18) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r5}, './cgroup/cgroup.procs\x00'}) symlinkat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', r5, &(0x7f0000000200)='./file0\x00') r7 = accept$unix(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) mknodat$loop(r4, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0) [ 1616.358423] tmpfs: Bad value for 'mpol' [ 1616.364924] tmpfs: Bad value for 'mpol' 04:35:56 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x200080, 0x0) openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x20000, 0xc) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0x0) 04:35:56 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) recvfrom(r2, 0x0, 0x8, 0x0, 0x0, 0x0) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:35:56 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:35:56 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x31]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:35:56 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r2}, './cgroup/cgroup.procs\x00'}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r4}, './cgroup/cgroup.procs\x00'}) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x4e23, 0xf8000, @mcast1, 0x5}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5}, './cgroup/cgroup.procs\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="2020c89e3461abbd908fcadc99efdb700eb347d37b2f0f2dad1b23ccb6bcff5d96b0426ae2425df7617316ca775a6c84292074c8a30330db82f8358f3fe812db32df3a2a10aca71ce4ddaa79e99be0b26891e911626203753eb01df6e234563c0a09173bf30ab256a764ce7e9051b7ade8a3a7aa27cd75e96b5964b92d852512fa1989e39d858a01259ec29626e8b23b1adebf413f958913d42f3a034c4d351e3100b7a094b9038a", 0xa8}, {&(0x7f0000000200)="e00bbcf2c2f48dd44301b4fd18b9c5cc92cb87cfcf3e839bc0d47a1ecd77a81d724aa6f748e64fd282919e6619acbcecd3b56e2fa57d981cc5a472542c6377e7d9859f8d6ee729d1205357cf833d9cf2292b602f434cd874b32c2407120d3ca9af80e23ba8e4f2b1f66408ea9b2b184b67f11926450c734e137c9debf1d10c348fe7", 0x82}, {&(0x7f00000002c0)="a2cf6b5af09ba2092c3dfbad69ebcf84be4dd829310591c63fc496f67c6644ec59571ef816b4d3bc0eef0675a8d33cc43e4f37c2b966950d29e2d5a04b1c3a59d106754261e2e5cea71e63678ff2784e4752774c088ba1ee4448abff4542bb95561df38a4f125062a413a609ead0844484dd863977e97e193e", 0x79}, {&(0x7f0000000340)="25ade319551b744d18ae1dd7ceb00de1df6f4c8da846ec2342fc176c90607a51ade87c08269288f23e009644b5ace87ad7fa439c68f9987f2f7c989fb4e19c30facb68b2b4ff35610748ea9a07ba64ea012fcd513dc8ac196d9905fc9729bbf5c6494dca70b465bedc8ade37da8552a0415dfaee7b6d8871a4abc4667e", 0x7d}], 0x4, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}}}}], 0x20}, 0x40000) r6 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d70886c3d7072656665723a302c00"]) mknodat$loop(r6, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1616.604787] tmpfs: Bad value for 'mpol' [ 1616.609190] tmpfs: Bad value for 'mpol' [ 1616.644729] tmpfs: Unknown parameter 'mpˆl' [ 1616.694802] tmpfs: Unknown parameter 'mpˆl' 04:36:07 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) r2 = gettid() tgkill(0x0, r2, 0x80000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r2, 0x6}) r5 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r6, r5, r5, r7, r5], 0x6}, 0x58) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x1, 0xee01, 0xee00, r1, r4, 0x0, 0x5}, 0x8, 0x1, 0x1, 0x400000, r5, 0x0, 0x3ff}) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:36:07 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) write(r0, &(0x7f0000000140)="7607e4634b3fac0fde4408bac4556cd24ad5e828afc0ef6e981265c208da71dc91206de67f00f31cd9ce9dfc026e43b03993cb00806a6d3f17fae34290e7d12055ace913b5b40d905e6699efb6b25425dd17eb57cd39ae1d1b648ad6193fa7f5c5e3399565280d55f2816eb50a2e22b81ac7e20424ae7fe957f82f70cf58567c3b41bccc0925f2f4f7753e0c446cb951b6928d4823c8e31043bc159b8da0ea3627af1d23041a4bea29", 0xa9) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:07 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x7000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:07 executing program 2: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x6, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x2000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/125) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x4000) 04:36:07 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:07 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1c40, &(0x7f00000001c0)=ANY=[@ANYBLOB="72656c756173655f6167656e743d2e2f66696c65302c726cf3b5753b18e4b8696d69742c6e6f6e652c72656c656173655f6167656e743d2e2f66696c65302f66696c65302c736d61636b6673666c6f6f01000100000000002c736d61636b66736861743d74"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:07 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r1 = shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ff5000/0xb000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:07 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x30]}}}}]}) lsetxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x1, 0x10000}, {0x9, 0x7fff}]}, 0x14, 0x1) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x44b, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="e20e740c71b1e8076760390168e51bf8c93725d4a260804a2f2399189ac3cf5a30744944b1d3850e0d028061370d3f53cc037a7fa2a13cb78fa8d85e49383a650e41daab0ef9074b4661453c1988bc2c5400dd455edcaa839217875f91747b9dc82b99457f9e77", 0x67, 0x7}], 0x2000000, &(0x7f0000000240)={[{@huge_always}, {@huge_advise}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x38, 0x0, 0x65, 0x6b]}}, {@huge_never}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) statx(r1, &(0x7f0000000380)='./file0\x00', 0x1000, 0x7ff, &(0x7f00000003c0)) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:07 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:07 executing program 2: open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:07 executing program 0: getrusage(0xffffffffffffffff, &(0x7f00000000c0)) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d706f6c3d7072656665723a302c00f8a065bdf7c7695a17a00d18543457bc2f3238fcba7ed9589403b235df5e879247574fb33dddfdb963bdd1e0887257e91a29646954f54cdbed76da84204c9937517cf8a5d503e4a50b98073bc94ac73a7099dd277cd1629ba6b424d929fea0b812aa21cd8991650c690e383fe92bdd11a9ea1899dd806781c0f18e633a034e53246dad9526c6b32aa732c11642641d1637b24909093c606ca336c83e6d79fe458ce60a46a84abdd5a8646777ce41173660e0d082990d"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:07 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x5000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:07 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)=@ethtool_channels={0x3d, 0x7fffffff, 0x52, 0x40, 0x5, 0x9, 0x0, 0x0, 0xa175}}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:07 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d00006c3d7072656665721a302c00"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x7, 0x7, &(0x7f0000000580)=[{&(0x7f0000000180)="154ab088f886d508a3a684db1afc0dfda16bed1a55ec2364cb34284bd5be1d68def6305b7e349990552b9eb259c686841554cd925549576ae6e06a489651c116b3b26285fd54e8e1a47b01a55c7b8e38131da83511a5c3b5ce70d649f75e14da188eb8e6622f282774e306521f1c5db2f44561f9207643b64e7f58e0c7267a4f869b13a2539ff81784839fb37f4a9bf51a5a543d239789dc49367fc9767c476f193c8721231eff9d4c35b8fd8235ac8e6544f7ea420069482ef59ca1a645c729c5246ad76d79f8bf7bcacfc87037271049bfe4f1ff6bf8e820517b6fac026352eaf5cddd9b1f49", 0xe7, 0xd6b}, {&(0x7f0000000280)="90ed9b235aed499c303cb13d0bbe3fef532bfc0889c33c2abb6ac78626a806f258cbc76ff32d2e14b94419a7d779120d0f4c55d83dd44f982363e9c74d7d8e1a90761628fbeb0f6d47e567832c33acab804e16e020af32758a4c8a9f51e4c9df4715a35ec3bac2dfdaf4de0652850a0962edd2a7c18ed11864b15cb198584bb2952e3fe05a03f634d1d72032484d8b38901659cc", 0x94, 0x2}, {&(0x7f0000000340)="87846bd131b8aa40ef09", 0xa, 0x5}, {&(0x7f0000000380)="446c213eb889634399ba8d3f398ecce819b9ef24afd1e30e6d355e9b7b065ca7881f85b2de6943f38622fd9299a41489786258", 0x33, 0x40}, {&(0x7f00000003c0)="115858084866f6a9f7a6b478884787ea6a265e57892f02e124abd5ce674c054eb9aee1c888b877c983014b67423c1e9ef1bb6b2e765ab7353020b708ad9322ebda96de7c2441341597d195e522258af8505e1391cbc9a09c9478a020e4935538fe776837b4b6c9ad9a1a4347d538abd852d2d34517c063cb3cb67e54630b9f0187435a39fa138fd00e2a34cb5e6864b50edb14502676f67d43becb25590641b0861bcf013641e2f1ad7379ea5821", 0xae, 0xfec0939800000000}, {&(0x7f0000000480)="1cdab836e1445b499b1f84933ea795d8ebe1ca5620c2ea61fa476214564f5e4c18110990", 0x24}, {&(0x7f00000004c0)="72d586def90b82513cb0ba97630f9bce807ed355acfa42067add5abf1e640f1475fa430a50ef6cbb76292e5bf34e22a2ba33cd8e3090c2bfc65061e76dce71c5b6230543aa721a9c0502d0ef5a6f2dcdaf610c846a949638d9c045378394f39ac48ea3aa1976847862eb5c12bdefc5e426251402c97d0673a1f9a453c2657cc1967e38b4c2d1c1a876e9da1f0a5bcb44a364d0f4088de406755d155d9113356bec5fd3c579bb7e1e", 0xa8, 0x400}], 0x2, &(0x7f0000000640)={[{@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x25, 0x34, 0x58, 0x34, 0x32, 0x55, 0x6b, 0x36, 0x67]}}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x34, 0x2c]}}}}, {@size={'size', 0x3d, [0x37, 0x70, 0x67, 0x34]}}, {@gid={'gid', 0x3d, 0xee00}}], [{@context={'context', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, 'tmpfs\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'prefer'}}]}) 04:36:07 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 1627.609546] tmpfs: Unknown parameter 'm' [ 1627.613443] loop5: detected capacity change from 0 to 264192 [ 1627.614136] tmpfs: Unknown parameter 'hugÏ›yÏcjéyW' [ 1627.617082] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1627.623170] tmpfs: Unknown parameter 'hugÏ›yÏcjéyW' [ 1627.627904] tmpfs: Unknown parameter 'm' 04:36:07 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000015) shmdt(r0) 04:36:16 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffa000/0x2000)=nil, 0x5dfbd332430fca58) sigaltstack(&(0x7f0000ffa000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:36:16 executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0xc10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000004c}, 0x40010) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@local, @broadcast, r0}, 0xc) r1 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(r3) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmdt(r3) syz_io_uring_setup(0x2586, &(0x7f0000000000)={0x0, 0x403df0, 0x0, 0x3, 0x15c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r4 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmat(r4, &(0x7f0000ffb000/0x1000)=nil, 0x5000) r5 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000100)=""/46) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x64) 04:36:16 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x100000000, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@huge_never}, {@huge_within_size}, {@nr_blocks}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:16 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) 04:36:16 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706fa93d7072656665723a302c00"]) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x20, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:16 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 04:36:16 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:16 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x1000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x6000) shmat(r2, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000467000/0x2000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) [ 1636.396755] tmpfs: Unsupported parameter 'huge' [ 1636.424623] tmpfs: Unsupported parameter 'huge' [ 1636.427831] tmpfs: Unknown parameter 'mpo©' 04:36:16 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:16 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1a2009, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1636.435749] tmpfs: Unknown parameter 'mpo©' 04:36:16 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r1) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/194) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:36:16 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmctl$IPC_RMID(r0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:16 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmdt(r1) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x14) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:16 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 04:36:16 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:36:16 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2d6a7f000800000000000030280000"]) [ 1636.638600] tmpfs: Unknown parameter '-j' [ 1636.646498] tmpfs: Unknown parameter '-j' 04:36:16 executing program 3: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:16 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:16 executing program 5: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x8000, 0x1) 04:36:16 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:16 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:25 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x0, r1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb) 04:36:25 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:25 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, 0x0, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:25 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') move_mount(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x4) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file0\x00', 0x10001, 0x6, &(0x7f0000001680)=[{&(0x7f0000000480)="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", 0x1000, 0x7fffffff}, {&(0x7f0000001480)="3df6c643dbf848c51d43b8513cc51ca0719f2f10319b4c3a572be8c2366da61b84cd80eb7b4d877f30af61320b07f93fa0f36078e610289412c8c8d7fcfdf0bfff01215040170c4623added807ef16e91a019adff729f242bf61c633125cf356558fc2ee2fbb1289e5acede6c74e9cb04325f1e91382d078bd9b6179efdbe1f84892f250abe6acaf7d846a8b108e21036ac5cac712b5ac84b22924f71a33a9b171716e70bc9172914ae88b35ec2e7588dd3397963991e1eb711fcc4edbaf6cb784adda1976df63e67be9441c987d2c89", 0xd0, 0x6}, {&(0x7f0000000200), 0x0, 0x8001}, {&(0x7f0000000240), 0x0, 0xbb}, {&(0x7f0000000280)="155772da2f08f11266901863f9005298", 0x10, 0x101}, {&(0x7f0000001580)="b73ffed37cdf47eb699d98980c669522f4facbb8df70d246f7ce6332cda181d2896d6c776811f39661e59916f17a13c634cd7ed5c87646972b8ee9ac4b3703c23f5ba5ea56c4926fb1c980112214d48d35bbea60b26e8ea50371485078bfd3810973db0678638c570aa1b1b8ced9566ded5aaccc150d59a13aca50caafe0e7cf1d2437218f70cfd76181ba2a747fa1a176077c14719095cd77df372bd1de4f3933eee13e5f5d9f928265d81b227f80b19e7d1af77bdee685280acc7d3f55d2f61e0217179c06dfb58a52568cb09824576da81668ef1f40e8fbcd07d7947e6ffdd1d59587261c26dfd9b751473c19686fa65ef4e2ad", 0xf5, 0x100000001}], 0x18000a2, &(0x7f0000001740)={[{@mode={'mode', 0x3d, 0x7f}}, {@size={'size', 0x3d, [0x39, 0x37, 0x70]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x33]}}, {@size={'size', 0x3d, [0x33, 0x74, 0x0, 0x33, 0x31]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x25, 0x78, 0x70, 0x6b]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x65, 0x0, 0x65, 0x37, 0x65]}}, {@huge_advise}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0xffff}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_hash}]}) 04:36:25 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)="008413573ebae709a686a9415c6c86a35bdfbfb1e88053399b9ce3b87187e3b746ec5689a0845ce93cfc1c7c8d7611abafb15b5ef545c25c7119771c78194e8951e9dbec9210009ffa59f2baf96cb51b438050a512e3e6186f142a801271519c988c42ef2cc2b6d1dbacd7b6ed1545fe6ec8f0b5747397348dd3ad2bfe43895385b415053eab7e699c04f941a5749f07f13f46b31ca29f260b41ae902fbc299d51174526126c86cb374a25caf5b293f77e4cbb6035003a250cb661cfcd6327ea02257e30e11ac775d2ed16560a4537ac49573a4d0ee8f05b36d7fbebaa", 0xdd}, 0x68) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:25 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x1, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r3}, './cgroup/cgroup.procs\x00'}) sync_file_range(r3, 0x7, 0x1f, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') 04:36:25 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) shmctl$IPC_RMID(r0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x15) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x7000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) 04:36:25 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001e40)={'ip6gre0\x00', &(0x7f0000001dc0)={'syztnl2\x00', 0x0, 0x2f, 0xf7, 0x81, 0x7, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1, 0x20, 0x0, 0x6}}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/usblp', 0x88c02, 0xc) ioctl$PIO_FONTX(r1, 0x4b6c, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="00010420", @ANYRES16=r2, @ANYBLOB="00002cbd70000000000006000000080034000000000008000b00000000000500380000000000"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r2, 0xc10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000004c}, 0x40010) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000001cc0), 0xc, &(0x7f0000002340)={&(0x7f00000026c0)={0x4b0, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x314, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x79b}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nr_inodes'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'smackfsdef'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcf}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '=static'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xde7e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcb7f}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':+$,$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}.{)'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-e*l\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'gid'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nfs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb8f7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe2, 0x5, "e7c380e793e6076b2dce82e8ee87345be5b3213c57b6024eaf257299f58c15c2d60719dc782ff25a755a5872c372ad102d1c4b4c3e9285b08473a09233c745b6cf7a99fd27f5ad1b9ae1c7613310f900cad4494c6be30cd4122c4e77defcd93a9b90f3e268448f78add6bc5663320377c834958aa2280f04f8cb0f9f2064960882e6cfd67689b86620e574675dcd13c0c3e3156401ef06545629380198be4c98ee73618057af05357eeb7a59451d7fe4a4b3d1a111da3ccdd36790159db29db4f447634e1d74567cbe3c72f9cc325f8404910b846fa8105e3374f97acd3d"}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'euid<'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'mode'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$}$[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '=static'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "96e21b200dbd5851998e5edfdcd38189bcf1"}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0xac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0x8b, 0x5, "6caff76ecccb1579cfec7365e1f95a10f81c823585ba61e5deb2a3ae81978f1783f087833aa319cf8868969fdf970237548249d5c7033f60d9bf2e7c069a346ef3996c6e70916b528e3cfcca99c28242e4521428cfff4a4b9172496e60f170c399c912f6128831fa3829abb97e34a0a61a132524a0aa8321c02c3ebeabb3a42aa575575e56b479"}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="6d706f6c3d7072656665723d72656c61746976653a302c0004d863b37a1716ed32a56fb39eb069714eb9d55cbe384d06784a5faf866b2e0deff290e3549bb61e4794dd476bbe6ce4e59f83998c55cfbcff2017a8e968aacbf41bac"]) mknodat$loop(r5, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000001700), &(0x7f0000001740)='./file0/file0\x00', 0x7, 0x8, &(0x7f0000001b80)=[{&(0x7f0000001780)="88f2d45eb0f7fc343b5e9cbd936853a861cdf9e0fcb279b54930b760", 0x1c, 0xfffffffffffff800}, {&(0x7f00000017c0)="5d6b33bc40e1c595dcd82f7090a3005900a05481106a06e52dcf18a0574a5eb0a19abfeea00d034a3683793b651d39e7e65c35ab77d29a666641f593313da6d25ca5193ea40e7aaf2e3bd86d3a894d6904660f48a97f616082534a1e02426cf7f071f78c0f12720b72f1e48ce002ceba", 0x70, 0x1}, {&(0x7f0000001840)="174be6c8e601d94684221f", 0xb, 0x5}, {&(0x7f0000001880)="6e37db8d1520603749d1b62921d3562cef31dacd5fc0e44fdf2e431d94232bbcd6898c719c0affd2c04554aaf7cd49dc1130072c6e718fd41a5795147f835184a3729508552921eac8134be1d993321b6bd6e5eebdc8bf1c95d2f77d1bbcc8875b35d02f8de2d0e921c56b", 0x6b, 0x1}, {&(0x7f0000001900)="388dda19bb425759a641a6708681ea157a08e4fb8f03722783319fa88580a2ed9c665503ce14c8c1b2f6fcc8778b6b817e9ee098daf752c3373f9942678f53a6556a1602da5d54200cb5e9be0f99cb56fb2db1a4106cd75815f21d9726", 0x5d, 0x100000001}, {&(0x7f0000001980)="64beaf227819f524d5ce7cbb515cdfc2bde1fdf65a30b74c25e6f530e69b6aa664768a1e5c17b8338b8544e8b10a86b9399aaa753f7bbe5aaf8430972b5bddc34bb4caa91cacc53ff9a504aeffd7773b00e7389b50d9d2c5a5c541296081e9c8b0e216d3046f70ed81b5957ade41fc2495ce3993c5781a1baca8ff574251854165c523f065c3c63a9bd8e3e13640fea3", 0x90, 0x10001}, {&(0x7f0000001a40)="42cbe031b9ac9ccdb62a92518e9fb7ffd5e416e1fdc51443d837c518168473ce8a39010a821c19c3fb0114d8a2418a77", 0x30}, {&(0x7f0000001a80)="1d2357d23094145d55dd4fd8950f33b060f5d2019610f021a03566c87c90a784d76d09bd1a19aff228fc4522017c9f9499f6b7b274fe271ceaec778a9825e4e6cf1a295e47c53d7626c61901fe7a81ac820afaa4663bc6614b136acd81c7db0fed5cb9c37df9291eb7818e84662cd2773eb9f0efaafa331cbfbae5955f43d3945d490b7d2f188917a7461bf7c8e8328cf74b0e5c4bc3a932a644f71b64b21e70c032de1bbb57b668b66ec162631b8c98593e7c93e4895387361478a288cf131bee44c4bcefb56c75a542a11b90de", 0xce, 0x8}], 0x4004, &(0x7f0000001c40)={[{'nr_inodes'}, {'prefer'}, {'gid'}, {}, {'=static'}, {'}.{)'}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@smackfsdef={'smackfsdef', 0x3d, '=static'}}]}) r6 = gettid() tgkill(0x0, r6, 0x80000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r8, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r6, 0x6}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r9, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1, 0x7, &(0x7f0000001540)=[{&(0x7f0000000180)="ea5807d64fe17ce497fa042dfab4fe8cde9c4d50e7946a4f1e8f043b5c7caf34caf337b304bd9537b675caeac18356906ffe463d9d460b42593dbd9e2d73b842d21bcb9a2c39244fd84cceafae1a2eb41f521bc2abafc7406ded97945633ae9f18c39f86fcc37b435712b8551a8e811ef7635353cc46906c2213a806dca2d5c6def848ca7efb1f1fc759f81f3a4aee699a097c44a501acbb50309069f4cb16d1d7d41ed73cd30ca7878ef2dc62ba91781919ea11b6dcb038e19ecac76e601df95d7163d10681ceb2fd681d3dc550ca77996788ddc188520f5f1ea1e535c910", 0xdf, 0x8468}, {&(0x7f0000000280)="286194124fbf6616ac6e52939d01bd502955d0968353d389a976fc35d03b482d63828a9f757df831a44e31c655682c2ef0d954f254634ad664b6abfe347868", 0x3f, 0x9}, {&(0x7f00000002c0)="318571110b99c0476d95d3527c09dba544addc43f60104dc22e2b01487479d1cab271017751ab0ffd3f99968e6ff97275af5560067b748cf7c36375ecfc7cd8cc795940222a3779f1d8011580e2c38a2ec81f4b8603654c9ac0b3e8517868ded60bb78b04b3eedad83015c46725fb89bfec1d0306f4c336ed19294ae7f2b7d5fdbe0117f43df0ad5e5f407f121eea19cbec163a8e65e4017afb0dfe2fecf40ee7cf67e401bf6b6ab1e75984138e93de6decdb2c86169af754838bf7c866770ca5470781ce3c88a469e1ceb7f7e09b481f2d00cf7daf997354a1fffdbc3c88672ac95894ab65a7d", 0xe7, 0x45a4}, {&(0x7f00000003c0)="eca99ccdee2dc070f5d558c3a9f7d1a2db9b45c8de9284d15676bfa49069d8303fee55dbb4685e2e3dcd0a40c6b15c0534d6fb4d9134dda67d396e3a278775b2fe5ff9f1fe48fad726931ce58c75c4a7453d94d107675e817294db7efb977fff4899", 0x62, 0xfffffffffffff0fa}, {&(0x7f0000000440)="a7a032be92ff6b78ae0769aa6bf9d0c860092b55a5ea708dc6fa52b10b61a114d7ee1a847be0368da05b6827eae22ecb96237b670e42bf2361e89e4a227fa30d98ff111530ee77cb632a58b7bc85d3961fe7c4c1fc3b3a167d051695d38b2652d8f05b1157ca0e25ffa5d9a1b4479d38479e7347b5efef6f11d491f84e3a0f81cd9adde1c2d38a3279d414e66d3be1c1e4e3106790cb850d7a99ba48e9627f865969e740ad31eedd4d4c61562b9e689ee9d14714832b22e79ed2ac33eb", 0xbd, 0x8}, {&(0x7f0000000500)="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", 0x1000, 0x8}, {&(0x7f0000001500)="dfc81677688e6fa6bb5716", 0xb, 0x9}], 0x4, &(0x7f0000001600)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70, 0x65, 0x38, 0x33, 0x32, 0x0, 0x78, 0x32]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x74]}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x5}}, {@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x34, 0x34, 0x36]}}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x22, 0x65, 0x36, 0x25, 0x65, 0x6d, 0x38]}}, {@gid={'gid', 0x3d, r8}}], [{@euid_lt={'euid<', 0xee01}}, {@euid_eq={'euid', 0x3d, r9}}]}) 04:36:25 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x65) 04:36:25 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x13) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/164) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f00000000c0)=0x200, 0x13, 0x5) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffb000/0x4000)=nil) [ 1645.537631] tmpfs: Bad value for 'mpol' [ 1645.572110] tmpfs: Bad value for 'mpol' 04:36:25 executing program 4: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0xc50, 0x100, 0x2) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ff9000/0x3000)=nil) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) 04:36:25 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x38]}}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d, 0x6b]}}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:25 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1645.680016] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1645.692713] SELinux: security_context_str_to_sid (root) failed with errno=-22 04:36:36 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, 0x0, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:36 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r1 = shmget(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/43) 04:36:36 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r1 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x3, 0x3, &(0x7f0000000300)=[{&(0x7f0000000180)="0e3a4c947d816a46d5de3a53de39e8fd57b9827e96f7523edccfcef6328615f20e3fca47", 0x24, 0xffff}, {&(0x7f00000001c0)="52f0483ec8721fba7e3c11d847158ba89941e9563149182d2a4fcef503d5f39cd5b1475208cb94464ef864e34ef2d6c52f6c9d62a2918cfc5a2fff3de956bfd10e7a854bb77eda4b23202fee68f6aabc4f8652ad", 0x54, 0x5}, {&(0x7f0000000240)="4a3c5c79e0ab52f0e9a415fa98593420480172f9771f6927408b89acb34e42f91965226d661834f71ae5850f8fce1b81f313034e9c2920e3ad8f274b9760e3b979b392ddcc3c180557a2de4ad24ccc3b6af4c5ec7ad44ea64ddfa7fcfd19c46d28b3824175ebcf3cc27887b01fe8e95289584b2063178008fb6e0628ff79d3586bcb6288f4781f3eb5", 0x89, 0x1f}], 0x108000, &(0x7f0000000380)={[{'!:^}/%:)%-@&{--:,%%,'}, {'mpol'}, {'@'}, {'mpol'}], [{@seclabel}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@fsname={'fsname', 0x3d, ',.+\\@-'}}, {@obj_type={'obj_type', 0x3d, 'mpol'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user}]}) mknodat$loop(r1, &(0x7f0000000480)='./file0\x00', 0x400, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:36 executing program 1: ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) ioctl$CDROM_SET_OPTIONS(r1, 0x5320, 0x1) ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f00000001c0)={0x1, 0xd6, 0x80, 0x81, 0x1}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1, 0x0) 04:36:36 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 04:36:36 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x280000e) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:36 executing program 0: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f0000000400)="9c", 0x1}], 0x3, 0x0, 0xa8}}], 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)) lseek(r0, 0xfffffffffffffff9, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xff, 0x80000000}}, './file0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:36 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:36 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000800000/0x800000)=nil, 0x5000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) [ 1656.576799] loop5: detected capacity change from 0 to 255 04:36:36 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r0) shmdt(r0) r1 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x1000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:36 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') [ 1656.622411] loop5: detected capacity change from 0 to 255 04:36:36 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:36 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x1000) mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x3000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x1000) 04:36:46 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, 0x0, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:46 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget(0x1, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x1000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7f) 04:36:46 executing program 4: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget(0x0, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:36:46 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f735d743c73ea9b7fcd9f3c55"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x1) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) 04:36:46 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6cadac72656665723a302c00"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:46 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) 04:36:46 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:46 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mrol=rrefer:0,\x00']) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) lstat(&(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r5}, './cgroup/cgroup.procs\x00'}) r7 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x4a, r5, {r2, r7}}, './file0\x00'}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"80382560dad76c3497a57f23ef221c15", 0x0, 0x0, {0x8, 0x7}, {0xc06, 0x100}, 0x3, [0x6, 0x63, 0x2e, 0x7ff, 0x40, 0xaa6, 0x8, 0x1, 0x2, 0x7f, 0x4, 0x4, 0x82a, 0x88b, 0x8000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000500)={"d799c58e1150a2590cbf74e4b05e5e90", 0x0, r9, {0x0, 0xdf}, {0x401, 0xffffffff}, 0x100000000, [0xffffffffffffff8f, 0x5, 0x7f, 0xaacf, 0x0, 0x8000000000000000, 0x5, 0x80000001, 0x5, 0x7, 0x3ff, 0x9, 0xffffffff, 0xffffffff, 0x5, 0x7]}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {r3}}, './cgroup/cgroup.procs\x00'}) 04:36:46 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) shmdt(r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x6000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) shmdt(r1) 04:36:46 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffc000/0x2000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 1666.874402] tmpfs: Unknown parameter 'mpol­¬refer:0' [ 1666.875163] tmpfs: Unknown parameter 'mrol' [ 1666.882585] tmpfs: Unknown parameter 'mpol­¬refer:0' [ 1666.893079] tmpfs: Unknown parameter 'mrol' [ 1666.894845] tmpfs: Unknown parameter 'mpos]t0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:36:56 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 04:36:56 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1040008, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:56 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) r2 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) 04:36:56 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xffff, 0x0, 0x0, 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB="6d70112a18086f63616c3d72656c61747976653a050000704c8c83ce3b95a84d6a189ab63faf82db63aae49891bbf59c8a3d44acd45eddf6daf5e3dcf01e6c318b630dbf4e5e86e1a13602cc9f213b1a6ecf25a68d51ec89a1621dac5b8cb7fdf3a30f51c2b7de74754606b84b8f3971b70d4db4f98e53437ae641a50fe581789714946e98cc62b54e659efba7bf85429d52480ea16a19c0b0520ede36311d464bf4d979c05eb2724bb13fe970a31bc1"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000140)='system_u:system_r:kernel_t:s0\x00', 0x1e, 0x2) [ 1676.222476] tmpfs: Unsupported parameter 'huge' [ 1676.223968] tmpfs: Unsupported parameter 'huge' [ 1676.248046] tmpfs: Unknown parameter 'mp*ocal' 04:36:56 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d826f6c3d7071656665723a302c00"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') [ 1676.251259] tmpfs: Unknown parameter 'mp*ocal' 04:36:56 executing program 0: fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, 0xffffffffffffffff, r0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706f6c3d7072656665723a302c009c9ca84f0e40f5ca50472a7ec7c8c4fe0b01f6824147d5c4d05ea60b1bd25b11e9f2f5e9a544d065f859ae6f5c40cece1a7b5024041b8022b445baba31f599d514f2e6da06ae179cddeb9d9da57b540764fbf04dfb3783619724f50eead27f3484538d7ff85558"]) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1676.366443] tmpfs: Unknown parameter 'm‚ol' 04:36:56 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2}, 0x1ff) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) [ 1676.384265] tmpfs: Unknown parameter 'm‚ol' 04:36:56 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fee000/0x12000)=nil, 0x12000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:56 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:36:56 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00@']) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:56 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d786f6c3d7072656665723a302c80"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x0) 04:36:56 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 1676.489247] tmpfs: Unknown parameter 'mxol' [ 1676.491860] tmpfs: Unknown parameter 'mxol' 04:36:56 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x4496, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x27c, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x2) syz_io_uring_submit(r0, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}, 0x1) 04:36:56 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x82c030, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e23}}) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/153, 0x99) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mkdirat(r1, &(0x7f0000000300)='./file0\x00', 0x11) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:36:56 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x4, 0xdd31, 0x1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) [ 1676.631324] tmpfs: Unknown parameter 'trans' [ 1676.666931] tmpfs: Unknown parameter 'trans' 04:37:05 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r1 = geteuid() syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x3, 0x6, &(0x7f0000000400)=[{&(0x7f0000000180)="6137cbf1c7f15c66f33ac229c55deff673977733f9e43e1b848148a18f58324946a9ad99d10d80bb8fb62f2eef17fecbf008c2c996572572656543b9b64cdfa696779dc80d13ce9ecd202450e750c1ce680e6bced449668f67b831d8da", 0x5d, 0x2}, {&(0x7f0000000200)="4d7470a3549fd250ad4b8174735b69df7d849bd36e8e5e3d9bb84ab52545d7808db3a77bc5ada9d38bbb22423720069503fc60611f3526f0317ba32104b6b9fc9f3dadd0c45e9530c65a40537c83d1e00cd9a5165b7b746f80afbfcad6dcc2feb5271bca42d92605930668bec8af764593aa6b3bbf295e02d786671d5ead7c0768972053f0c8f0ab79d9ba539fad7a4d88fdea9bd7f1883a65aabd2d6fc26668821df54a20d59f043076e042867b5d8ec476dc97984e8f3a8e0a3d25b805435d7c18574c50621caad855154b3da329d33ac569a5fa51da38626d18", 0xdb, 0x100000000}, {&(0x7f0000000300)="0833850c2af1b0fd42da54905fbb87a23629836f986b9262b6270dd155159cf2e552", 0x22, 0xbbb}, {&(0x7f0000000340), 0x0, 0x233}, {&(0x7f0000000380), 0x0, 0x4}, {&(0x7f00000003c0)="0cb9f6e2d99a239e82e35289968b0ee3ea11b06cd54a8ea566b6cfd2630d36f719ce738e7580254b231bc63c4a", 0x2d, 0x8}], 0x8, &(0x7f00000004c0)={[{'prefer'}, {}, {'(-&'}, {'tmpfs\x00'}, {'prefer'}, {'.^$'}], [{@audit}, {@context={'context', 0x3d, 'system_u'}}, {@fowner_lt}, {@smackfsfloor}, {@hash}, {@uid_gt={'uid>', r1}}, {@dont_measure}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:05 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:05 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:37:05 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3d7072656600723a1f0000"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "8e690b7f770efab33187be361244b6b6551ceedecc6e7f7761567127373ab09d", "689e0ba0dcc8fee55c166bead915181f20361bc0b26defe7bdcb5da745fbe2a5", "dac8136489b1639527962877e80a10f88ca32bb6189ad078c53d906b46aa68dc", "46e7f1754df99c2b88e45df8de33df4152a789629461a10dccc696fbbbfa4049", "f43c7c86d94d0b93f01d4b0c154321845073202f13dd6b1ce2a7bc4a05457ca3", "e1cea2f391c54d7fad4f7009", 0x6, 0x9, 0x5, 0x2, 0x5}}) 04:37:05 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:05 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget(0x0, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x10) 04:37:05 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:05 executing program 0: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6948}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x210, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "b201b702987f68a13a28de626e270cd33ec83dbd3b698d9b4f41d563"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xae5a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcfc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffb207}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x34400000}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb4ee}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xad}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x408}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff9f28}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x543}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) r3 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}}]}) mknodat$loop(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f00000000c0)='./file0\x00', 0x800, 0x1) mount$bind(&(0x7f0000000200)='./file2\x00', &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000280), 0x2080, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x4, 0x3}}, './file0\x00'}) symlinkat(&(0x7f0000000100)='./file0\x00', r4, &(0x7f00000001c0)='./file1\x00') [ 1685.887531] tmpfs: Bad value for 'mpol' [ 1685.893058] tmpfs: Bad value for 'mpol' [ 1685.953393] loop5: detected capacity change from 0 to 264192 [ 1685.974500] nfs: Unknown parameter 'prefer' [ 1685.996435] tmpfs: Bad value for 'mpol' 04:37:05 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x54000050, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x11, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, r1) [ 1686.018622] loop5: detected capacity change from 0 to 264192 [ 1686.026771] nfs: Unknown parameter 'prefer' 04:37:05 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:05 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) syz_io_uring_setup(0x7830, &(0x7f0000000000)={0x0, 0x6417, 0x8, 0x2, 0x83}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 04:37:05 executing program 1: clock_gettime(0x5, &(0x7f00000000c0)) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffff4b, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2527db78f17ccbfb2b3da8e0380bc2aa3c70842df6f7649c4ca587f6e4cbc35bd95b9baa9380bf1742118bced7c9a4c5ff7228e3884d570a09e7a4dd3298a929273b9770ea06d564ccbac831c5b23c9e493a5da34ccea0fe25b8d95fe9a0e2c676eceb11aeb84e71c1643de49ef9737010e48c00cc3d95cca987"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000280)=[{&(0x7f0000000200)="d8e9c6815aab93bb986985daa605bb9abecb889029e04478b487f791233d83915184b7626ba1350981656fb5fa8fed105667c66df9f625678076fb12da1a5672471f481a63b9099e6ea4cf533d8fa58cc45976b92c964293e75726556b2cad111d121584d1d15360a298f6273bcde63b600f3b", 0x73, 0x4b}], 0x1000000, &(0x7f0000000340)={[{'tmpfs\x00'}], [{@euid_lt={'euid<', r1}}, {@uid_gt={'uid>', r2}}]}) 04:37:05 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x2000) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 1686.114090] tmpfs: Bad value for 'mpol' 04:37:06 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3d707265583777b5674101"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x80, 0x0) syz_mount_image$nfs(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x1, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="123ba119317c9d7366738b212c1510674604557fc04cb6dff2d1af8c68538e9178afb88db9e3424f11340ecc1c82bb217addf85349cd886106fa2e5a07b5933120732df35aa1923f026bf0850fae1e5829fc99e8776f400e42a8dd2a0881637e7bce75d5184d49", 0x67, 0xfffffffffffffff8}, {&(0x7f0000000240)="89dfd1912531de67351ede3e31e17f5ea8362cc04d5a2fceb307d0a825fe2969b6bbf9236bfe9a3b11c36019fb4e4fc13d7c60cc622d9e4e14306410fc729fcc7404bc896c21d4ae810b2394850ce72476e68f385639a292cec3664020c7cf4ccb5b90048ca7f225c671a909b765101dcbc2bc752e3443db76e391045ae3c1a55b7394e48ee33db9aeb6431b6c9fff461b6fa5c18cd6df828b6dd582cff8ef152f57db2c4d930a36f01313eed9a92a00ac3f", 0xb2, 0x4}], 0x8, &(0x7f0000000340)={[{'\xc4($'}, {'tmpfs\x00'}, {'tmt\as '}, {'tmpfs\x00'}, {}, {}], [{@hash}, {@uid_eq}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, 'tmpfs\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x36, 0x31, 0x37, 0x64, 0x61, 0x65, 0x30], 0x2d, [0x0, 0x35, 0x66, 0x30], 0x2d, [0x65, 0x66, 0x62, 0xc2], 0x2d, [0x0, 0x30, 0x31, 0x65], 0x2d, [0x5e, 0x35, 0x66, 0x64, 0x65, 0x62, 0x35, 0x5]}}}, {@pcr={'pcr', 0x3d, 0x18}}, {@obj_role={'obj_role', 0x3d, '/.\\\xc6].}}'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) [ 1686.171752] tmpfs: Unknown parameter '%'Ûxñ|Ëû+' [ 1686.213083] tmpfs: Bad value for 'mpol' [ 1686.226325] loop5: detected capacity change from 0 to 16383 [ 1686.234037] nfs: Unknown parameter 'Ä($' [ 1686.245908] tmpfs: Bad value for 'mpol' 04:37:06 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1002, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}], [{@obj_type}, {@appraise_type}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x100, 0x1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r3}, './cgroup/cgroup.procs\x00'}) pidfd_getfd(r3, r2, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x30e682, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r2}, './cgroup/cgroup.procs\x00'}) inotify_add_watch(r2, &(0x7f0000000180)='./file0/file0\x00', 0x0) 04:37:06 executing program 1: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="01001500010000b900160000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0xffffffffffffffff, @ANYBLOB="2e7e45a305653000"]) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer'}}}, {@huge_advise}, {@size={'size', 0x3d, [0x67, 0x50, 0x30, 0x6b, 0x31, 0x76, 0x35, 0x36]}}, {@gid={'gid', 0x3d, r1}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x30a}}]}) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 04:37:06 executing program 2: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = shmget(0x1, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x7000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:06 executing program 3: ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000000)={{}, "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"}) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmdt(r1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1686.334627] tmpfs: Bad value for 'mpol' [ 1686.341421] tmpfs: Bad value for 'mpol' 04:37:15 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)="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", 0x1000, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)=""/185, 0xb9) setxattr$security_evm(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0), &(0x7f0000001300)=@sha1={0x1, "619f952f7ddbf20013a5c27e83175fe30db227b2"}, 0x15, 0x3) 04:37:15 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) r0 = shmget(0x1, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x3000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:15 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:15 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r5 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r6, r5, r5, r7, r5], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r4, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r7, r8, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a000100b6137770616e"], 0x20}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xf0}]}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r8 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r8, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:37:15 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:15 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x4100, 0x0) openat2(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x121c00, 0x20, 0x8}, 0x18) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:15 executing program 6: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:15 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0xffffffffffffffff) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:15 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/237) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 04:37:15 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@size={'size', 0x3d, [0xefc19d2cbb5c789, 0x37]}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x1) 04:37:15 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/186) r2 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x8000) [ 1695.857213] tmpfs: Bad value for 'size' [ 1695.880513] tmpfs: Bad value for 'size' 04:37:26 executing program 6: r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000800000/0x800000)=nil, 0x800000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:26 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) r1 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r2, r1, r1, r3, r1], 0x6}, 0x58) r4 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = fcntl$getown(0xffffffffffffffff, 0x9) r6 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r5, r4, r4, r6, r4], 0x6}, 0x58) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/187, 0xbb}], 0x1, 0x5, 0x3, 0x26) r8 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f683d707207430571526cb500"]) mknodat$loop(r8, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:26 executing program 4: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)=0x1) r1 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x101000, 0x60, 0x8}, &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r2}}, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 04:37:26 executing program 3: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:26 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000280)=""/231, 0xe7}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000480)=""/161, 0xa1}, {&(0x7f0000000540)=""/218, 0xda}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x3, &(0x7f0000001680)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001800)=""/85, 0x55}], 0x1, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}, {{&(0x7f0000001900), 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000001980)=""/73, 0x49}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/93, 0x5d}, {&(0x7f0000001b00)=""/232, 0xe8}, {&(0x7f0000001c00)=""/81, 0x51}, {&(0x7f0000001c80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/210, 0xd2}, {&(0x7f0000001e80)=""/28, 0x1c}], 0x8}}, {{&(0x7f0000001f40), 0x6e, &(0x7f0000003300)=[{&(0x7f0000001fc0)=""/48, 0x30}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/83, 0x53}, {&(0x7f0000003080)=""/83, 0x53}, {&(0x7f0000003100)=""/227, 0xe3}, {&(0x7f0000003200)=""/225, 0xe1}], 0x6, &(0x7f0000003380)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x5, 0x3, &(0x7f0000003600)={0x77359400}) recvmsg$unix(r11, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/145, 0x91}, {&(0x7f0000003640)}, {&(0x7f00000047c0)=""/213, 0xd5}, {&(0x7f00000048c0)=""/66, 0x42}, {&(0x7f0000004940)=""/151, 0x97}, {&(0x7f0000004a00)=""/16, 0x10}, {0xfffffffffffffffe}, {&(0x7f0000004a40)=""/176, 0xb0}, {&(0x7f0000004b00)=""/124, 0x7c}], 0xa, &(0x7f0000004c40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}, 0x10001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018}, './cgroup/cgroup.procs\x00'}) r15 = accept4$inet(0xffffffffffffffff, &(0x7f0000004dc0)={0x2, 0x0, @empty}, &(0x7f0000004e00)=0x10, 0x800) r16 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r17 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r17, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r16}, './cgroup/cgroup.procs\x00'}) r18 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r19 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r19, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r18}, './cgroup/cgroup.procs\x00'}) r20 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004e40)='./cgroup.net/syz1\x00', 0x200002, 0x0) r21 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r22 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r22, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r21}, './cgroup/cgroup.procs\x00'}) r23 = ioctl$NS_GET_PARENT(r10, 0xb702, 0x0) sendmmsg$unix(r3, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000003640)="545c643b4d7e5fb5b380b7bbc71b84a494fc3635c178e2a3d4869a7be84b98edad5eb7872e5f4a234302eb61064921880cdd8292b80da237cce784219f6532cf7c1ce5781700687285d086c41fe0baf559f0f5bb02f90c4de933ae64572b8d2110758172b663398c540ca7fa1f98252c99f416cc5d15e7b323817016595286f52ac1970267494897be1ee06c5735df09bec915a15e8f8ea622b0acbb70c2b85e54", 0xa1}], 0x1, &(0x7f0000004e80)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r0}}}, @cred={{0x1c, 0x1, 0x2, {r1, r5, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r15, r17, r12, r3, r9, r6, r8, r18]}}, @rights={{0x18, 0x1, 0x1, [r20, r7]}}, @rights={{0x1c, 0x1, 0x1, [r4, r21, r23]}}], 0xe0, 0x50}}, {{&(0x7f0000004f80)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000050c0)=[{&(0x7f0000005000)="3a3ed0e3d5bd9ef68e943d1c8c202b294a050ebd6261a2ddbd083b22", 0x1c}, {&(0x7f0000005040)="a6879647bb3fb29098f913aec5a9c2eb774c51db15f7ef4e6eb2799dc49e215bc99a3ef57c395d024b5e6f5a9e8128436dd75230bd9b717fa13419c78d566ffdf250fd19506f6b3055be", 0x4a}], 0x2, 0x0, 0x0, 0x4000}}], 0x2, 0x0) r24 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000004cc0)=ANY=[@ANYBLOB="6d706f6c3d7072656665723a302c6e725f626c6f636b733dc834702c73697a653d36253334392c687567653d616c776179732c6d706f6c3d6c6f63616c2c686173682c006843a8f047a1280a662a5b74bbcf57bb7801077437928136e23f98e327c71b886dcef149c878b2222e552df14bf54b2b7a2046474dde3c4642c932de77dc8ad25d45f98c129ca77da3ec300740c2cd4448"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x1) mknodat$loop(r24, &(0x7f0000000040)='./file0\x00', 0x2100, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x44028, 0x0) 04:37:26 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 04:37:26 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f00000002c0)=0xe8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x1b00000, &(0x7f0000000300)={'trans=virtio,', {[{@dfltuid={'dfltuid', 0x3d, r1}}, {@cache_loose}, {@cache_loose}], [{@obj_user={'obj_user', 0x3d, ',-@'}}, {@euid_lt={'euid<', r2}}, {@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'mpol'}}, {@uid_lt}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@smackfshat}]}}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:26 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r5 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r6, r5, r5, r7, r5], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r4, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r7, r8, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:26 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1706.709493] tmpfs: Bad value for 'nr_blocks' [ 1706.737927] tmpfs: Bad value for 'nr_blocks' 04:37:26 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r4, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r5 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r6, r5, r5, r7, r5], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r4, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r7, r8, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:26 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) 04:37:26 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) 04:37:26 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:26 executing program 0: mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100009cb5d654350001000067e4109f00", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./cgroup/cgroup.procs\x00']) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x111001, 0x154) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) 04:37:26 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x80, &(0x7f0000001940)=ANY=[]) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001900)='./file0\x00', 0x8, 0x0) syz_mount_image$nfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xc15f, 0x9, &(0x7f00000017c0)=[{&(0x7f0000000180)="0d1ddbff6cfd26cd7b0ea90e7520fe1f5668576a4103825af8a0e79f99ef9aa0f55b80706d076638a17146543ff71350211ce1f08f29a9e4388c2e6627e8e766b83c6f9d0672509ad87b724f480329ef20010d8795d1f872776c", 0x5a, 0x3}, {&(0x7f0000000200)="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", 0xfe, 0xfffffffffffffffc}, {&(0x7f0000000300)="91e0b2ad114d5d838046d8d9ba7ce8c4d49a42b12983c230e79b4ce9667409ce6043375296e4359d8b5710e08ed4ff45a9f2e0dd78a4b1a1221d7e02e4ba3abda6cea9a5bb39210efa1ea8d525f5e83a2ecab0a1d8bfdfab978e5390e6b7063acc0be4e1e817d36bda608d1b83606e609048104cc30cd33e908d303247ccfa165259827b6f", 0x85}, {&(0x7f00000003c0)="80994c5cd44b77d5258121fa29d5f976408eee12e4bf7f2f55388e1c5bac3ca646bcc8543fffa61dc958b0732343dd4569b277590ec49b5dbf65623091f539519343065af5f8cd5272d43a64371a7a0b90deccccd4c4d1866a0cb88bacaa1e06af886228b0fb0bbdb2422b59e35e1414e2492f6b8ba6c01b7ddc726aee856459ec0500b07e31c8524601e8fe78dbc64946c1e2206646e196f020961252047d3c798f1dee07ec729d7a7ecc9c56c8c6aee600259a1d25652f267bcda0c1242a0598b5b2ac34127db80034ed710dedb90883abf99fa621543dd5", 0xd9, 0xb0}, {&(0x7f00000004c0)="098c0ebdffeb5a7d670802b1a4bb9232c3a601bb2f1d0451812a13d0867320b397b3c808c64eea04fae22ab2a1cc277cd29ad41920eb5661bd10cb917743a528293b5b5428f4cea74b61530732aac4a933bff620925d32f17e9cf53483eece3777a0511427a017c2e165046af1291a9be031082ea22b98526aa358391ea72094ce26816a3bb4c1d1348a8fc8f640a5ddc15d1c44cdc5b902a6399fd95c1c961c2e48c3ff9b99ad5396dd2cbe4519cc", 0xaf, 0x4f}, {&(0x7f0000000580)="23c110232575c6d349b5239a5327d1fb384d74175470cebd613c516dad3379530dd56b3e13b8830fbdb02b2d21a27013e9adb0cf2c83ee3a438de7c08f065eb86eb7e6c774846c70cd3ae8d27dc098a351f8b74a2f12577e6ad0451095d08f1bf3601391328f91786d99e198a7c1b6f2a34791d26a2d5a713e8271ae82870c13f501d288c6c210b7006485baf8aa350c549f1e215efbab63f6473f36100ba21325c2e022b50b3209c307076c566a05300f292666cbbac94dcaf9d490963e9fe3df3da54472c367f8b57c8004c7adb94c947952b05e350ea6b2e5019990ed50ed9036cb6e3cfc6d32005dc361971d6a76", 0xf0, 0xffffffffffff7fff}, {&(0x7f0000000680)="5e5c5bfe108427d3650fd95c", 0xc, 0x8}, {&(0x7f00000006c0)="545190283d3c1cb4034193a70e87a9045fdf5da7e36b7bc6ddd2f76e5d470f20ef5fd3366cea7f215de7ee9a647047aafd14da026f1109bb31839fb87556390791ee5c31497e2f0d36678cd6141c7fc39e57abf55575f4c3bf3046855743e38a139d2b71bc27c17732b52b9692fe10be238f56b3c872976a1fe007a550002aaeb7757e21e3bbda0b72bbb05e22b9c2906b149378b468bd6f0d053871b4462b908e73ab15d6669bb5e8cfd80a7e372471a7eb2f43dfaf9a867f527d16d3bf227b9b38810d91de726cef9601ccce9c6b5b296aca1825f19555875f4a01070df6673838b14198687632e6302d2820ef2193889c066bfd006aedfd", 0xf9, 0x9}, {&(0x7f00000007c0)="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", 0x1000, 0x9}], 0x400, &(0x7f00000018c0)={[{'tmpfs\x00'}, {'tmpfs\x00'}], [{@euid_lt={'euid<', 0xee01}}]}) 04:37:26 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x2000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:26 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fec000/0x14000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x1000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1706.940434] loop5: detected capacity change from 0 to 16383 [ 1706.943413] nfs: Unknown parameter 'tmpfs' [ 1706.966310] loop5: detected capacity change from 0 to 16383 [ 1706.969761] nfs: Unknown parameter 'tmpfs' 04:37:35 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x6e, 0x2f]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:35 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d706f6c3d7072ff66c9feb8bde05e9acd90bfc9613aac65723a302c00acc2f146e3d31761936ce4a5caccde2ced30161687701039dbea3971e6c9ff33361430206dba838151e7b06dec3338c672625d090e932cdbe4e6e105f3c7f326a060ea23a330ec0e7e7f73afb77b1a8e16eee6d04214a56a8a214662a96e0ad8c19340509fe2fe41c07bc18a34cf89c065004a49b90449c87ad529c9b3d684f8cec49e045c4f5fc50b2b816cde7413e7ed375ebbdf37d4d9947ea64aad0b7be7bc2f3ff32410f1732321c9da665f83db45cc9b3299bccd89480732cd162458868b9cdeebb8feade4066c78587b22a6e974d823dfb3dc9afbecb648d381176812376c0c1a586b25631356f15a4d3850041bd4157a5c02321ae2797937d4ad1f6ca406128aff1b5091bac2280e1e5244a02f64aff37601a0703abc3acd4630d93fc58e76b4b34d47e1b1f586d4596385feafd65ec4028a4fc9333f77f291719140b0fde2fb9fec5a771adab9065233ce789c"]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='task\x00') execveat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000180)='mpol', &(0x7f00000001c0)=',^:^%\'*\x00', &(0x7f0000000200)='prefer'], &(0x7f0000000340)=[&(0x7f0000000280)='&\x00', &(0x7f00000002c0)='mpol', &(0x7f0000000300)='/\x00'], 0x1000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x2}}, '.\x00'}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:35 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:35 executing program 6: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x7, 0x3f77}) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xec50ad936f896055, 0x100010, r1, 0x10001) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) 04:37:35 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r0, &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0/../file0\x00', 0x9726, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="78f3b4e353f2c7cbaf61baf39c301a43099dfd5315448dfad75a57a8c707d8983ff47ce535139897034dbbc31834826c06b0bc80018e03c2c3145647b2", 0x3d, 0x9d9a}], 0xc00, &(0x7f0000000200)={[{'tmpfs\x00'}, {'@e#'}, {'tmpfs\x00'}], [{@fowner_lt={'fowner<', 0xee01}}]}) 04:37:35 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_io_uring_setup(0x4496, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x27c, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x5, 0x7a89893a41736893, @fd, 0x20, &(0x7f00000000c0)=[{&(0x7f0000000000)="c0b87767dd4408dc7bfd3c6c86803b3febb207d709b91bf0c38b5303f366bdcd9b901a8b84a0b6a0c779a6e861d6ab715e73db2e1c1b1788fad363d0898895d648c8ff18ac879be96a61f6ff543db3453403e0153bf6f4f31941adf61b2a39dfee712a4b58d017b0374b048de1ffd7de967891b87c22ef1c55a6bb7b42da49c0091f41d8dcc86688f7dfdadc067313f7864c7a29942c9edc0635b32c5c2c14f518fa468b09dbf3ee2cc8be5d9dccd451ede167b0777e77b75501915c0fcbc1e8", 0xc0}], 0x1, 0x4, 0x1, {0x1}}, 0x6) mlock(&(0x7f0000ff7000/0x4000)=nil, 0x4000) r4 = dup3(r2, r1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 04:37:35 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000008600)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r5 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r6, r5, r5, r7, r5], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r7, r8, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:35 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 1715.886181] tmpfs: Bad value for 'mpol' [ 1715.891438] tmpfs: Bad value for 'mpol' [ 1715.913412] tmpfs: Bad value for 'mpol' [ 1715.928915] tmpfs: Bad value for 'mpol' 04:37:35 executing program 5: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000780)=0x3) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0xfffffdc8, 0x0, 0x100000, &(0x7f00000005c0)=ANY=[@ANYBLOB="81fde350d80b3c3e1ce123ec4c8ccffeb2cff322b2c523f667a2aa8c08038ede5155321a5ef1bdec34c439904e75fadc802a55c18aeb0fed47a5e5f840218897e33ea5cdeb8e5a6ac0c8f51577cf1482d1a3421389da2a139bef105d218339"]) r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x1, 0x7, &(0x7f00000004c0)=[{&(0x7f0000000180)="0ecd973fd5ed681688b37bf3d67065ce568587acfd84333932295ad451e6b7fbb4d76b502160cdafde54e6b1579c7ec56a861df84361c1286fa11ab23abe6bd4386a8929db0b6010382894c99e36ecd069a379a33df0efba66e0baaf872c6d5ccab297c7e2", 0x65, 0xfffffffffffffffa}, {&(0x7f0000000200)="88a41a7ee589a39497dd6f0e1680c3de5df95c6bdedaf99e9c666ce8f0bebb5767c50b568aba1c12f663a672ea06c296e5d8eaf0ac7cb3e845541c4b", 0x3c, 0x3}, {&(0x7f0000000800)="41b0caa4c8f414d11cc4c99e719dbd42561363165c7f7cfc700235f60af390e0e71a9d45c6465f451432b72c8a60a85860387570ee0857a87ead05547655f70dbc0fc1ea46765ef2c19f375cc50108815235962e682ed48dd39186cd236bb979fc63534c1f922edb3aa97c565935f440142321b945b952bc823a5c28eb763e3d8751b55708200eb2b64bcd3f2d7a42683a43aafcac20f3bc1425eaee3351267e0ca577a3814630c3248f19ef16d686f1ec3e", 0xb2, 0x5}, {&(0x7f0000000300)="e059f284344cda01d1c421c6fd7e67bb43c097b28fcc444ae3957c1995384ea9ca504d0a0e363821f9548eadece4471ede769214baedc3ba2ce87e1e9c462cd9b161f9540877199bee8e7752d5a0cc3726fe0ff54e4b6b4eb10b9b0fd6a521434c774cb3e727962a88bdd9db697c4817fb6d8d3d95d66ae2881206917ed37909c224327a530af12ba417e20277144c113ec94186acd61da2914ef49a17", 0x9d, 0x80000001}, {&(0x7f00000003c0)="5232920d1cdca000d2667a3cb452d8d16738cd16b3be2d67a5b32e60036934efe20979964254bef80b9dc5beed23", 0x2e, 0x1}, {&(0x7f0000000400)="f7ce5560ae7c93a11fe5cebf40874d3e03a934bce2a79b44299cb6354ba3e44c90e95db9769f82ef5f7ba5dd7673eab77833795633f7b5abd83b3001b16c21e68293ad5dbca2f41833305437cb67dcd8dedbbea7efc47c8a0b75e36ea3aa222f9a0efc1c6fb3a714c9008b566734", 0x6e, 0x8}, {&(0x7f0000000480)="9461e926c26442cc32b670a628", 0xd, 0x6}], 0x1000000, &(0x7f0000000240)={[{@block={'block', 0x3d, 0xc00}}, {@overriderock}, {@cruft}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@hash}, {@pcr={'pcr', 0x3d, 0xe}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@subj_role}, {@smackfsdef={'smackfsdef', 0x3d, 'tmpfs\x00'}}, {@seclabel}]}) statx(r0, &(0x7f0000000640)='./file1\x00', 0x0, 0xa0f5ed2006d27878, &(0x7f0000000680)) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000580)=ANY=[@ANYBLOB="01006be5343eb6d3ab4166a86c576cc600009100006ac1d50000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./cgroup/cgroup.procs\x00']) mknodat$loop(r1, &(0x7f00000007c0)='./file2\x00', 0x2000, 0x0) 04:37:35 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@private, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x1}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() r9 = clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x1, r2, 0xee00, 0x0, r5, 0x150, 0x6}, 0x80, 0x4, 0x0, 0x8, r7, r9, 0x6}) r10 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmat(r10, &(0x7f0000ffd000/0x1000)=nil, 0xa1eba9c999fdaa6b) [ 1716.051284] tmpfs: Unknown parameter 'm¦ºªÊPú‘wé}LwÙ' [ 1716.057427] tmpfs: Unknown parameter 'm¦ºªÊPú‘wé}LwÙ' [ 1716.067220] loop5: detected capacity change from 0 to 264192 04:37:35 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x3, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180)="bba4225cf18b07d6db8079814671d108d34898a3", 0x14, 0x25b}, {&(0x7f00000001c0)="b6ef08ac8b4c019c517f800131965e20a593963139e961b4733a798cda6b983ce0e9192334997bc45fb5267dcd41c54bce88bf53e9fa752fba139a0e1be7e62295b86ecc7d954c5d38cb3c", 0x4b, 0xffff}], 0x200000, &(0x7f0000000280)={[{@shortname_winnt}, {@shortname_lower}, {@utf8}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@shortname_lower}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}], [{@obj_type={'obj_type', 0x3d, 'tmpfs\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 04:37:35 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000002680)={0x7, 0x16, 0x2, 0x20, 0x8000}) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6da6baaaca50fa9177e97d4c77d907000000302c0000000000000000bb77bbe0b442939bb247"]) syz_mount_image$nfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3ff, 0x7, &(0x7f0000002540)=[{&(0x7f0000000180)="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", 0x1000, 0x5}, {&(0x7f0000001180)="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", 0x1000, 0xc37}, {&(0x7f0000002180)="f7dca4fd17df5e53a413b3f86d2bf8d8b9a9baa814dec0b626d01afe67ac841f710ae6e031ce8828371b190cdbc1c253d7fd399e33cc3f831f68f92d0cd91932e5ae1cc3b7578bd91868b263debeeda1e907b4033d13127f701b683b0e597a36c893d35f387bf72e177a9c93cfb114032031d9b81420340c6b82d59a467643770f21d2d42a94db9430203b9f37fdd2df069de21e6ea358e75024056a89142e256c6e0499815a69f2a05076a98fb01ab1dcaaea9a50f6388aa2db20977b48a464b3ac0eafdcdf18c959a69c46ddc7b3499f076e21eb298f2ff495529de158e198", 0xe0, 0x1f}, {&(0x7f0000002280)="3ce90ed2cbffb1faa79c073d86abeec59f0e52bf35745b80fac5e1f7d7d64e8a652903f0c92d344fdc2a569812210ed656e46860a439eeb5f6e9d5acbbc2d3af32c2", 0x42, 0x7f}, {&(0x7f0000002300)="6cc82c1c4ef720e5ff761331beab79a754efbd866ec4b726a259562498bd2db09dc65d96ffbc1e765ab2f86aad7de193416b007bb79106d8ccd42a0ab7dd082de21d81b3040ab7324e35eb16b3c4600d7af57348334ff66a8241cd0d82658573f1dd647d9b8998dd5de016faf11d12b98fc16e3d3d904aa04f3292bd9a5b5d16a6ab6410015a198f3448e5ec3bd10448ce8c5b7b899707a7a65ad0c54e53a61a35f11205a2df2d6d9335514c1fc083d11f46fe3d66f30d8f7df64352f2f07a4bd84d225211fd6a9868195d34420ab155455fe09457b4181f37329120601df9e77bcb85e2c714ccb7c3c40b4fc3a07824dd0bae", 0xf3, 0x62}, {&(0x7f0000002400)="d08217a67e90144babb09ead6f8968a0341009cbacabbb9f61d3800f0cc19b80707b2688", 0x24, 0x9}, {&(0x7f0000002440)="261609394d003cba458ffb1a02a9b3b58ba2538bb1136726f5720121264cd28f6d8550f39c149dbe3afb6b46b9ce1d1793f31189c313ec6293d9ba7893b02c7d02449c73b2bc9f283dca7db77ce64eec769b4a81ff01a62150cca240df58a6cb59faca695a506ebb95929dda7b8a9eede841494c051e158a19690399c7fd5e324d1eead1e0e72027d0af11864325dd7f656b651457ea02dff274772d4e616b5e97a4ac1bafc0f78afba6423fc3a287a6f94982ca3adf2da5024b7eea836f784b9467dc9645cd", 0xc6, 0x81}], 0x20020, &(0x7f0000002600)=ANY=[@ANYBLOB=',tmpfs\x00,tmpfs\x00,tmpfs\x00,misk=^MA\t_WRITE,fsuuid=c5f17f1\x00-f9Vb-d54$-c049-33de5942,smackfstransmute=tmpfs\x00,hash,obj_user=tmpfs\x00,\x00']) creat(&(0x7f00000026c0)='./cgroup/cgroup.procs\x00', 0x86) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1716.135876] loop5: detected capacity change from 0 to 264192 04:37:35 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:35 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000008600)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r5 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r6, r5, r5, r7, r5], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r7, r8, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:35 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:35 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) syz_io_uring_setup(0x3b7e, &(0x7f0000000000)={0x0, 0xe134, 0x10, 0x0, 0x1f}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000140)=""/158) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000200)=""/88) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x8, 0x3b6d, 0x0, 0xfe, 0x4, 0x1}, 0x7) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:37:45 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v3={0x3000000, [{0xf1, 0x103}, {0x1, 0x2}], 0xffffffffffffffff}, 0x18, 0x7) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:45 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x300008, &(0x7f0000000180)=ANY=[@ANYBLOB="733d7431676be96a0034a248dee69972746d35322c00ae8ce1be00724a7ca2422fa5691bd622795c7036c3f84a85247f5fd673ddb0f82d20b69a949379b1103d1ec194aff2593aab7a33ef7a13827531b65e33e34c4cff205d192f968cc4ba986eb49f714a1ca0c002d057beb1d4937f85a20e65bfb5c3f7def1e60f7126c0ed9648539f0000000000000000"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:45 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000008600)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r5 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r6, r5, r5, r7, r5], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r7, r8, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:45 executing program 4: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="f55ce1aa286a9270fe64a2ab25fcce8897d00ded2db198f267b267614bd4a09ee6d549f8b8b337a1994ae34250836b410f6b069ebdedf325d8e54f43e804a3a572421f2af7a8a329f17a93d33c568667d2ae17697643988d32ab9c979db75f30befb8688254abddede107126ec98329a4353b65b5cf3457111787c5219428e8a755b3faa109755e868067107f86b6bceab1b02c6e59c69ad70a8d0d4b32b10ffdeb53ac1daade049baf313061025e12078baef66a290b18834764c91", 0xbc}, 0x68) 04:37:45 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) r2 = shmget(0x3, 0x3000, 0x10, &(0x7f0000ff9000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:45 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:37:45 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x140) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018}, './cgroup/cgroup.procs\x00'}) sendmsg$netlink(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)={0x25c, 0x3a, 0x2, 0x70bd29, 0x25dfdbff, "", [@generic="890cc49a9a8d9be38082e76694070c5d3de1d9f6ba980d229b5f9876defdf598d9e040db74269c25866c7caea3e24c95039a1e18b71bc7cfbf9e911114b61289909ff6015509592e2111a425b587318cc851b39d93404241e0384731aad1a590d87bf553ca7f9317783f13e2dad05f7e9e58a74fdbc51d89f05ed32b5cae2ba77fe2f79146366673799ff9bcea87c47d03ae79f02115d968dced61cad37bfa2ba0f06dea206e0c46ece060c8d45d008d11", @typed={0x14, 0x44, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x16f, 0x80, 0x0, 0x1, [@generic="7c08e050b35edffdb79b9f189226b0d17a1dfc60315e0b4cb9f271d7b4f8e3100eb81f85fdfdd9ed47ecc1d6b1a71dbf99c7ec8918a37d9612a4", @generic="84cc508aed34681152ba0952655275aa1c2ef0bdf06c1fcbee33ce9e0a8d3c4550f3d0a1fe39c3093ae2bb88b4dfd8e28cc6aefbc79d4fe5a3424d52652e835a87db1ccac37e257f02c80af9d1e78872b9743f437a424488dcac80d0d0bab74c761802350e7e6a77b662cefd79dcea23f6bee980666bfc", @typed={0x8, 0x28, 0x0, 0x0, @pid}, @typed={0x5, 0x11, 0x0, 0x0, @str='\x00'}, @generic="31e179938ad9cb3215b720f1f46f78f9e453c87ef7c4276a23d75ae52b7f76851d1b18ead70450ac4b220739908312bd4b39e3617f40d0c2208e28c751be66d64b6624287a4c94e186489e0af9d5975a0b2d42a79b2d909cd96d62e1efdcc6a239f4eba2353aaceb2fa5610d71c30dc6daee7f71210a7af4351b0ae222511f5a66b3e17ddefb4e68e18895e426807b710e49659c5210185f30aa", @typed={0x5, 0x88, 0x0, 0x0, @str='\x00'}, @typed={0x5, 0x58, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x18, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x25c}, {&(0x7f0000000500)={0x1c8, 0x34, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@generic="02f224bcf64f147ad8f3e21210650f0c66f568e488f19b8d2173e19e82e57b6929aa3e5b7f5c0b91ad73bb740390722467ab59c724a5097b7fa9c0f09cff757bef43478630f72b2d1a987fc6ea8636eb329f4b06054ec6ce0819e9", @nested={0x15c, 0x2f, 0x0, 0x1, [@generic="b6882b68e1de47eb8e0a7bf82e1dad5dd300fab989ec3a783335ad46dda556f23083500672e74742a102ce6145f7fc166cbd41024ed6f606cb73a48ecdc885dee8c74331cd34637f211994362127184f2fbe902a5cc8b4ed2115168fa88d3bd7fde9695cd678faa25362d0c6748b79da3f996c7a16f0", @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x1a, 0x5d, 0x0, 0x0, @binary="06c834a4070efcc740b90c45bbcea2b9c8b61c3581fc"}, @generic="d3833b9c093a9c9d389458f8d8535321ccbbb0e6b7133b567c73d82eae93ff7546cac57d351fc7a2ba6480cecaa2b551e137d19d143a9f8287665d37813e7913cf5a0ba25c31b6ceb2d0e373db221d0afeb522a7d2131ad67615a4b87c46131033c4", @generic="24d6c7208eaf218167c268eaae0c72d7f52d6132103812913e23a273a8b7cd56877c9bce32fc8e6b9ad713d4ff64e18ac2f28237fb9c22d34eedfbfb7a19e03a092838c12ccc20769c8882a279f16f35cb365b71fc97a0504cf536d7"]}]}, 0x1c8}, {&(0x7f0000000300)={0xd4, 0x17, 0x200, 0x70bd2d, 0x25dfdbff, "", [@generic="40067cba845ebf7384688c65eb917124f8bd0d99752e006112c73d3a9ee66369a663d5da690ec977262c75c876a8ca99338c7d62783c9e2bc0ad89ede6a8218369a232ddb4935cb1af2772a02b51751af3bc11946a7391427a7f4715ea2656a71e645c4623", @typed={0x6, 0x82, 0x0, 0x0, @str='$\x00'}, @generic="28783d48def7184f2b7f408d72acaa87487eff73969f180891d9b1ab0390d0f93133e521374ea50fab0bc827a8b23af64a5a6814970601291afb9dd0bfc92372a1a1dcf76078c91617a5743587ce6689ab21d1d7"]}, 0xd4}, {&(0x7f0000000400)=ANY=[@ANYBLOB="180000003600080827bd7000fddbdf2508006c00e0000002"], 0x18}, {&(0x7f0000000a40)={0x684, 0x1a, 0x200, 0x70bd27, 0x25dfdbff, "", [@nested={0x122, 0x30, 0x0, 0x1, [@generic="7559eaed301fd04e9bd9296f70531c46d7ce59b075f9151df0d2781b34bc609c3d0be0ba7cfebedc5972e1d99ba1db0258ec42405f1500e78131fa84453972818d09bb38545ba5f4f961e61a787ba48bce1c1c8cda665f334a0a5906e9b897b453263bc6df8420e3292400f2326fcb9f586f3b06ac20cd13447da9b567bbc2f65a8076a54521db6805833571ed2896116800a9e62b4ec5a4660b71c9bcd0dbebdf10abe2e72e7156c384c97493a08d2c492db1cee177bd6ff5433354cff3dff04d340bea4c7247eb3828cc05f806709ed3cf6fef583b9488d8e8c086377c72c7e532d7a1", @typed={0x8, 0x7c, 0x0, 0x0, @u32=0x81}, @generic="13f5b4642f7e89b894db50aa73e11f97cfd953653ab219357b15a936e266f6f68d95c0319f67e63bef318664ccb4eff13029"]}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x3a, 0x0, 0x0, @pid}, @typed={0x8, 0x35, 0x0, 0x0, @ipv4=@multicast1}, @generic="57dea6c5cc7c4e80e2dc31fe96e806008e3e20da4c0571d9c88b906b77838669e07b957c19fabba079ac72db5c33f532588c28dccb084d529d0e360fa6af9fa27be2c3be20cdb9bcda5c552af5bce38ce34c5d61cd919c51c4dbe47da62d0c6f767214a31139c57b81a9e5a396fd9c70eec1b052780f98a5fcfb1400de7d86abb762e6aa3ebcf0d88f7c99537bb40944eee023921c9c4117645a08b10dd58cdfa4f7a3c84cd5132c4b4257c28711608d50a1d434508aa6f6b8af305b9a4c003ec9ca1a88932e586175b329", @generic="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", @typed={0x8, 0x13, 0x0, 0x0, @uid=0xee00}, @nested={0x363, 0x5c, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @pid}, @generic="de0c9c17efa9f66b0ffcdbbd4c706f78bcce09d14b7eeabc9b09f5624f22970e77129081", @generic="03eee1d14ee6e238ec317756c45658947e48b266ee2e5522e858a545fcce1b2f08e03b55b9e3a9be2fd744ca767ec60ab7689b83051fdeb0c50638fa409b2b7e3b731e0badf91fd2f484130b443ac8cb61255425c801da9d877674426c1591bd76e0b3a5711ab31bd48954df3d2e609a62875d948ba9be52bef3d035f6447e32e20824419145c4fefd9ce913a6fddc89f61fa0931fbb9628e72f737da9b574cbf941104d2c9b272c014714e9e7cfe8e2c4da955693dbb979ad17cb4d6f8f41fbf407a21e33be7eea0b70", @typed={0x4, 0x7c}, @generic="7c6e8d8244942c7c0110190ce6651efca5404aca9f5f8682b405209fd3561a090f144804442f374dc4c4d6c019be112ef9c4392eedb1fdfae292ba5d350067993e99edd1b1a162946c6fcd388ee2ff2ec19ac344a9ae563fc490b09c4679669556718283962a2f525bda0ad7", @typed={0x8, 0x52, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="44f4802d34f513f684bed7e527da9aeab3b0e79bbc4a46072fa699fb1e8c67a2de22177bc313c23be516e7a10a96d82c8471669d7e87074b7b20d9234d323f27911676c8a531b2a024a6141e2fea96d865a4f78a879bfdd424ad8f11f1f50993745018ec77d7639da3336f6d4fbfaf8bfe67df2a09d565f0dd6133fbba8337a10701aa395b31720da1966e0b18c5610b8c97abb4d1fe1db498f831c518", @generic="68119b9544014d1c0d70bd3aa4a21d71ac67871426bb35e1e4ce56180682d45aed1c8f09f47420b374a1169d302f1d1535271a76276a2193ab452afaefd8b705d240856ca3b033086d6b504ab114402d1d8c8b8d7f75f2e882e9c1ec951539440ddf8e89295876a7923b7d2f817cd93de6f65b6f5c8918fb4f2903d3b34309a3cbee06a07f650876df73700f7ae4961e0a7aa61d9aa2c488411d10273c361414a0a37c14979d59fcd08f2c1e5d16fea14ce53b3fc97fcf3a1798e98134c0a70db9194969a43bb7d1", @generic="cc4052906b1ad2e5a396352a2291746965b2cdf1919422a8716fcdd4628cc674d9f9970d2dc0a795c9f5f1595a3c141417c18c905a4c9ce5d74ff82b1efbace2199401fe7ea3fd682f70fd7afa34d9bd2ccae69d11784e85bbd2a5a540526e909db6e9b5d382bca77379504867843abc831a9ebda05aca53967838842e7a1164279f2f2381a532c70720a9d1"]}]}, 0x684}, {&(0x7f0000001100)={0xb4, 0x35, 0x100, 0x70bd27, 0x25dfdbff, "", [@generic="176d1b6aaaee8758efdccb57508a312832944e064e4c794545640f16a5bd58d90566eb6619b535aaf97875ac9cb9ac5421967d5513d1dbe7f15252fe1d223aba51631cb34295cd136f34dc7653f8ee7e105ccfaa5bbea0b505b3eb42e677f775ab58a7f56e8e324da9b658710f38781573fc8bf97602fbc027f877194f8365eac10c39be9e43376f3bfba7927d01513343015865f6fe44266d724ccc50cc8abed30f9e"]}, 0xb4}], 0x6, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r1, 0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r2, 0xffffffffffffffff]}}], 0xe0, 0x800}, 0x48011) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x10, 0x8010, r1, 0x10000000) r4 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff1000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0x1000) madvise(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x4) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r5 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x6000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000040)=0x3ff, 0x9, 0x1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:45 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mount$bind(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x4000, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1000, 0x6, &(0x7f0000000480)=[{&(0x7f0000000180)="f9f97c480f2c7d", 0x7, 0x8}, {&(0x7f00000001c0)="c26a3af0b278b3b8d5e9b9734230bcff22889cc1086d1690995cbb94e2f9b009503912f40e820d1b18583e792db1d9252bd7e89962d4f5e13df9f8e5357f532f517235da7300696ee07a44a6bd71255d27fbcaee814f11ff2eae1f3d95831ca89e", 0x61}, {&(0x7f0000000240)="9a408e262f3f05dc207d59a4576776dbb6d37f8f9555eb00270602b7cedabddaed8bc3da338d1b5434c4c8f1871f1f8cd48be632c49a540e78edd0dc5677821cf5e6786c085e3344697310105b040ed2ef31cf9954349f315a12b12425a862bab0deb3ab03c611cc73a957ebc1631bd89f6a4988581381db483b96f1c19f98d1bb64f1023fcc1d560dd0ee308b4fa6806e4469c7094eedde3210c3971b62ff9403f52dd2b26f6766df486b0c9de9a77694d1d2e4f8df36688f116cc6f824d93a58f1a10181737ed0b6738403537bbb43798c066b1c9dbbf1d4d8a02123331a1b", 0xe0, 0x4f90}, {&(0x7f0000000340)="33e376", 0x3, 0x1}, {&(0x7f0000000380)="b5d1f314951986a0739641d3770e876676df3d0022dfb27da43e709eb7d45f59939e3c07c2f193d36fcd61d34491aff0fb98f7be455ee8405161452316bfdb8d4ecee49c550be895734099f2b661e0df0422bf98c20b28a3621181e5dea238766bf94ae499738b7d8f9b498e4c183d64b4a04630efc1915cb3cdf51ffcb018e8912077cc7c052abf686266f07d731064413faa04e49ebbb97725efc8bd9f5715754e24c872ff00d091ad4951da", 0xad, 0x1}, {&(0x7f0000000440)="3d0fc1f11fe449038a3c74d7faea901e36caa7f3ffd0750dbde13d97cd35a70e5d73", 0x22, 0x10}], 0x80010, &(0x7f0000000540)={[{@huge_never}], [{@smackfsdef={'smackfsdef', 0x3d, '-,}&*!({'}}, {@uid_lt}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, 'prefer'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) 04:37:45 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6d706f6c3d7072656665723a302c00995ca2098ed957efe726fd155a118c990e87690a36c2c4a0cad325cf442d42e390e2f23755a96eede111a4217ddfbf2e1ea37fa99082e984cf681f396eb29631455300295d984667302c854b4d3fdf5a9d10f42f4dbb335afacec03b2f4a343ba3a98ad28629e605753ffa590cf11a6ef5550b0b3beda2b4d1b2f962fd0b558e4475694c1358a57331d322883f196a5a77a53e63faa22cab071f535826b4fe9d58f8b28289134d61febbffaa613455b28c78c028f72ea7519b3745fd314a63447c535483dd72229b1facc5e5e189243691fe83138887a5090000000000000020a616749c7f86c88a3c719262001352d6f6fa653483f49d25a1ae1e3eda64bee50a69be25b57477d150def76eec606941a7c9ac97ef703141b4e2ad37e70000000000000000cc6fa1014c08b0a907f82caa192a5976a899647a4ccfb3e650e777f87d6e740d60c6f2dc7a4b37a369c0d80bb6a9486a0e920db8250e4a97e1ec6698c7b106f45afbbbebc256bd7b649feafaa6455bd26413a3363797913062d017fe9267833175f31ef3e5117568f39422364aff4515f3f8a173231267cf3d08386b5ba829d6cd710e0c3b7908cc491b3849187a8db8b421989e1cfa21f7dff02c22d2aa97f2ae36fa2c216329fdd6a65f199fa3358ace6af5ae489c72ab261536ee0973f553d16f61d226f485e0f1e93ef27ce32ce1738befc607033ce6ca68b0b773901bb06990005d8f"]) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x80000000, 0xfff, 0xae28}) statx(r1, &(0x7f0000000140)='./file2\x00', 0x100, 0x100, &(0x7f0000000300)) symlink(&(0x7f0000000180)='./file2\x00', &(0x7f00000001c0)='./file1/file0\x00') chdir(&(0x7f00000000c0)='./file0\x00') 04:37:45 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:45 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3e70ff0100000000000000"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1726.039782] tmpfs: Unknown parameter 'mpol>pÿ' [ 1726.042288] tmpfs: Unknown parameter 'mpol>pÿ' 04:37:54 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:54 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1828805, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:54 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:54 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x7000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:54 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x20, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="b7adf19949637776c0364b8db54ba508a2ba7ab6bd678c5832a844c5afa182405e10106e2724bf0f44", 0x29, 0x715e}], 0x142004, &(0x7f0000000200)={[{@shortname_winnt}, {@shortname_lower}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) mknodat$loop(r1, &(0x7f0000000280)='./file0\x00', 0x6000, 0x0) 04:37:54 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x64) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:37:54 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x2e]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x800, 0x0) 04:37:54 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1734.841138] tmpfs: Bad value for 'mpol' [ 1734.841284] loop5: detected capacity change from 0 to 113 [ 1734.854029] loop5: detected capacity change from 0 to 113 04:37:54 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x78000000, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1734.882370] tmpfs: Bad value for 'mpol' 04:37:54 executing program 5: fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="00fbe801d0e7960000b8cf8ea1302e1d0ec9879589b1864e2d8d3bb31eb64b28c8938c75080124c15e83c4e02b972f245941eed40cf59ff1e6a25ed88375d6b28e0aedc3b4de2e9dd64516327552f3b4bd971f70943e90f54b014819dc6fa61032081608d305a24a770505a0014a154dc473be971359c89a1bd41520b36ff3b341a7f1226b2e90c74c9ae8eea57bf79b5fbbfc6bc7a0b5d6135fcd3bf062837a114d544a99b2ecfac3aa28266a7fb4bece97afb0fbe6bfb6d066160a0e403ea7731bf6ebb660831319f4c48cb4318b7c1c7f00949eb6d447522c03168f2c24ba6c7bfe6a9ce47c80"], 0xe8, 0x1) r0 = socket(0x1, 0x0, 0xffffffff) r1 = syz_io_uring_complete(0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000006880)) sendmmsg$sock(r0, &(0x7f00000069c0)=[{{&(0x7f00000002c0)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000340)="778cb4f3a5fa2b2adc441751e262f71e5d6f2fefdbca332c9fad80ff18faff2ee7fbe7f27e604aefdfac68de30be8c8f5f87d43c2d6aec870798bf69034329372e9f201e651f3fa5809f1c2f686ddfb0cb73c0310b042a27644785b008c4495fb370b836d9da6b89a8d90eebabc372cadd9ca17b0f04ae807d34e3a14eb2d99153fc05fd78ef471b1f86ce476c2f14d71c896332f4cf894baf95bb9edf5bcee5bdadca07e65ed517a8023d52ca8e4ae95cdce90ca7b9d3f6b97dec14c0c4193e66bcdf0fc8a87577533902ee2cd48f5b7569c2abb6383cc008ad3b5e95dc053a0368bb77e359395ed0fe69ee985ee347373b5589e47b671a375b7b1ceb4d888918127906d2cbeff66dda3a2bbf4b51ddb831c085c37ea56ed02d59e659e6ac5f9cd6fdb3abc0340e2ceaa153e7af4402e6b68a8923ac7e58b86741f196046f12dd8d150fef4b2138afcf2b4cde0b454df88d23e5fe90b66ec9d9e10a0375627fa1b1161f098e7901d9f2517373bda378fd8ab5cf684e2c5f3d65712e5b3f0202bf289de995eb745491b03dfaa922b77cdbcb010b9e7a3a5c68e4f98cde7f88dc72375d7853a83e7dfff03cadc04a895eac0948b2f58bdacdb207be39bd922effc06f3b3647971b5770cacb405e5a760639296708353328293522d1b29f27bb4e1246cfd9b6c5797a677bc831494b3d894d5c5c8003978ac5daec7e6a833714b88e8968589f73a78cd4a3d67a868831040a17cbb454245f18b4b642eb943d305a02bfabcd614a01971d85107c6e88f9415efc3cf2cf2e57a5dd86305113919c4c8104250426fb21f739e60279b2866fb2c98f8abb4936d05bb54e8bddcb3926bcdaac81c8e029ba92b3e02bc46dfb93c0eed0a0f2e93dbb18ae5af26a6d73ec8a73e57d332fb33e0c0ba544a1ece7cf618a9465cb5482727ced5119403ed359e61cfce9662add1fbbfc841462fabd2f53503369687c7dcfa3c484a045710aaa3dce6540228d611582a6c1f269fd305c0b9c61ea4b3af517998c536c1af238ebc9023e27dff87d4e47af03693de1b3ffd8d87579c4a8401029102319a78d1831fa36186342ded9af33c7173e49f8cd21709477950f1273696109c1b8973ea0c797c1ea26935cc99bb352b6a56ec02399a6c3c56b62069d0a0a4558e3a65873c2fca91a731f4c098d27a34775c8b0f6d8d488d68d097f8d165852b503eec63a1088c443955d86382c3e35f0794a281c16deed9a32454786988bbf0cc684ab1a5a3096ec844bb31d4be7024faeda19b175d341fe6ea0e0ad0cf7734c97dba55cfaacef9fa4551676bb224c189df74c832152733fe2e7f7e14ce895dd8f17d85d3cd105665272f7f67ea99616f714021482a8c88434a870bac052e817f04ea8ff321c343a4b8036af4aa949c94e163daab5c794044ac55933d9b62ca99048bc6990721036edcc6ce7bd0f194cd0daf21676dd047fcb59ceb9a6623b8551fbdb27cde1dfd0addda62ecbda2bd50117f1b4a700c128f25cc684f3d1d6236845967c72abec939e21277f1872850d8a2df196fd0f59069a77b7d7ce671322b1f800c4ae665ef02f2d7c2719ebfc292f8a77f83f1a9f90f7ea82e651e0f578db0d875877199d9967938f491eb510d088350ca45bb92cd3df537a0ac2286d33a1c16bb6fdf6d76602959b01a445de76c54961140ec43c795aee8be7d17071d7f569307240fbfff407c210b173ffc8c0a2fd136b1d2ba2a6593bafb20f2d0389806487ef9ff68d45b8635bafc6ccf82cb8dc367761bdb19a05a002a92b37fa620a8ce99690d1c37e6b74a379eed63b400b8a05ecbde0a5799e6a4a3c8b8294ba9241e49d54454244a158bbe33b4d232eee4e2b38336943ca1be8d3bec7572e97eff44fdd7ea93fe807ebd915cca2d540604af995544a206558476238a828959fb5174522903428bd497951660a967f516baac5213543def30041a1e68823acb4c06e2b3e900005c62354b41e9aa3979be69c3121fe3ade09fb6d319a53630df476e1a9cfa105d4a0f32b5d0832666fe3fb51b8448b86cc65708222b25af7fbe1658c84729cd308d1d7e126b7260660ea211e8546512e96313a4f48a93d330c8f454d176e9cb41726f20c58fa99127cb1639a16fdc2e0f4fce6981167a63a1890085e393124505c56ef1c16bdcc7750985a560f0be80410a6656255ef6183b4cb58e3e741bdc347f7ec9661c9e521988bcf955667451cca77ec12137c362365137c974e5e5567a38e4a52981d6811207cad2c9f04a413ae89ae611eb3cbf94b66881db3890764810e32c52e1f48c275667aa82ebc0094b3f3171732f7c9451bd04d47d2920215148bd1a76f6cc0b4f8aecbb223d23f5129f822ead9a7f070c6ffe07d18a3ccebce7c2a22ed4a0cd87097216877a6dffb0b6e17ab022b6f458821dbfc1667abe977fb92eca93c9d56212b6cdc85c48d3b6300bc5ac878981c7e3cf8a976fc5fefc7fdc5c998665e4d0395c452f27327c887f77a6d171b2307451e73cf5114f39947f791829ab5ad84b0deda6a7247f660cab7447b04e72e3d4f46018ac95006e7f917687614c9ee294356c86b4f056c5f69a1329b4870f6e9aa19ef5784f65dd36282da48c1d9482f501ef0b20faf1b0601a82e4dfcc45562732a0897c32fd6689119fe51da0c89073a57f08d09716aaddd20797c01baa2dc7d07a85e45820142d8544bd2fb6e45ec730a1f797f05fb45df3074a46637c3ee4be7a21b8fa27b7e3a31e3fcffa64ac5b02749d9126ceeed5126c38c5b9572a27826ae668a08da07b854e869120dc1ee97f3cba01d4bab89dd773d34d3325f490be299971b15c5920287557179621b2fb765d829ca75373ef8c26bf664ebca6b427a766d219378fb697b22d775498292ea416f2b14dc9ac0feb779b434f4ada866156b5edc0e1bfe32a2986b332aee8e28716487d11b7e9c193367b11f52fdfbb988a3e0d9ebb984855bad8b96e283729b0eb4055446d652cf481becb0681360bf587c2ae43400785df1c4450bc83ca5fbcd8118a2ac34e60ef77c54403c8f3dd2923bd8cfc634b2a4c9b6da45e7db3a674c9cfec68b9fcbbac5675e4e3292aa00f0a26dd8d46d9fd42a830cc2ce48e46bf914412034b52a08e89201b0cb9f962b3944fd631ad06ffb83ebf2aca358e808f2cedd228b9c8dfacf6b1b60db53ddbfe53b9d331f60bf15ae1eaca094e657f7d794bd695b67ee8a24712e1969d3e22f97e2f1cd976106ba23e5594170c43a0363e2ee13008f836a81262503e48f0ab3c53d8592bfc511bc91a423f0d14bced3d2f2f023694a7effeffc60e3cb466dca211adb84310a459adefdff187da001907dda955301b4407bffc8c5a7b9eac8900edd051948df1d4a61cbb5a15dedc43f99c2ee72da95ca2fa16cc82c39068bebfc584b68a9942dfe776d911e2f66d3939bfe8bdd3c259d53d765ff4b3bd1865457a421f5235e024e950d28389761e2c8f1a3b21df3db6e4702787fd01731bb0e7391d771f69c474406396d0d3ad2d9ed1cc64d6fcdc8ae8f74ffedac4e80d5efb051146024ce75e246a26789a6c7c7e8df5fbaa22f6540f0895384e36483323f9af2245fe5d9a11f6d2171d4632f84097970f55dbc84b22d7eb041efb3133c61b1c96df7ee0848d753ea3832c5d327fe7f665ad03e49a388f9c677564f1b56b06d690e06e9fb4c06546075c3fffbfed2a34be550bc6f030806d561eae2e9e27b07ebfc29ccfd1dbc9ed63d0e294cd40a0039f1e2b409ded4c415ffaa4f0653daaaf89efd8dd9c86cc80d9ff31ac82ffc50832a66e746ad6165298ce31b2a1f5c377bd87696c1aaf80063fce1cfae6c95085df867cb762e4b6981be904cf8213b441b87e61d6c38600c4884480dbd2c89908c3383a6dcab3ec05a79a99d78a56c29f59513a37f6c78464f45d48889e7228caf17a000f0883a49a5f0991b50c8b78a4c378f0fce396b739615532b48ee2c53dc1358150fe189b26ed23c74f95bbd4e77d3102e2b7f3518705de4479c1c2e308fecf8937b0217436e4b1385a2930c391c9a7a31fd5f51a7a6660c3da7122e452ad2696dd88671778379df96e22b95b594187cb1c22a26ee5f16d2af1dec455df6fefcb850679fe2c3d9229e34ff9a4785ccb1a8c5c67079e805d0f51eda25cc9b1c08480cd8b76928f16b3a889351172b075c702de08b5e64410a831cbb9d37cccfd92bd73caac1c50bb6cb983f7a720e774147e9c18f161f231c7e1037bbfe338d617ce89bdacdd574bd4f98a828e2dbf5dd18d3db23ac5279a90f710c406bb4d2d23941d244dd459b80a50ede3fc6ada43bfe023e1d4872dd87fbfe19ba5a3d6a2b6b7e163be3f3672d84e75762bd2b4e0af55c53e8c2207c0c0f4ee777839be6a1d8ddbbf434061cac651d8bcc7f44ef10c6095e48b9abf8f1db4c8b726bf4bfc9df71eee8a42b8aca8f70e7ad216989b7420ff7f393e858dd0e1aeba506aaf2d50163efa8d72f4ecae5eb7e9e0fcaedec050028bb891af69ef6c5337e01a2560afb4b4ec036f03f55ec4cce478fdaa2050394122d18dfecf067385a369cfd7bc3cb7435e660c04f24f36598c38833f59bd74993db81fed43402a0a23fb464f02b4a26be85a515c97222d1ebe2b49d311b3a455463e76cc98f857f95f8ac0c41dc23c535404c383594d32fcd43bb432b6993e43ad3a8da276b2f12a3e79dbf1570b12d4ea89e07032a7f1c3a5ed5e2248897a4df2284673b74eab071e7eef1aff4e7a19b14433cc91a84b5bb106c19af8a204555014479dba4364c3f187c97e4ef014e44a8edaa451442a30415bfa384cf9818dc617fba7eb6137d9c3b8a34c19fc62498aa626525cdd769d73a1cdabb21018199081834149566011aae2dfbc3816807186c29d42d7c4189d16c9b9b1c88085a9cf5669dfc7cfcff7a1372614410dd89068ab192be82d292ce10cbb5792d86f69b24457792fe42dfaaf6b98730aeeb3ee8759f5b207269023beac5811698f11096376eaae6bf90fdf6b77dd0a5792713fcbe8cd8d8031718d0ac23b368b20a035094a58e43b9b18fcc04108a1d5641d08efb99b390f3036e8c16f514005c5a73bd64c7c123813ab7d838916343a070337eacf8f8258a0d92d953c2e4cec7c8c2c44766bce5d98b90f526c53febe8cbf3893347e0fa80b3148c05c620d2e3f23f6b8d1acb3240125b5e5f532aceef4eae54c054e6e7039e6adf5a66d83eb7fc1a0c5bcade72341bbfe15bd5037b93febc75ce0e35e079b2f2ce9af31d0c898ac750d21722c608c9ccfc3d615b65fbf9f6434121f1688bede3ac9b7dfc19861fd57d9a720970cc9dbe37d4babd8a7b91759e7254944178eac17ebac1a67435af13fa719095fa17379c803c8c1c8b11e33fd1cd28adffd20c5f44869220d5a90e3a40159d79c93f3c724f6da99f7734263feab154f5b2361e4a5254380526f49fd4ab10f96de89393a5ae407be5404b8218f962799133465226998cd5c27f7ee5c5976619c188ab0aa28b856004c1f28cfd0210809c51b90858d4b169f0a87fcd05c6320d6e4c299257fb29c4db91841140e809941df5b25d4cb9344177b265942ed1d828905bd2b30f52ce4b16cc2558972e509894f9f6e9d6d04d75858d9cd953beba48e9d917c6f20a4a31d80d0ed7ce6f3e7c5c3608accde2bbe0e52bfd14d658c2fc9fa77b09891e36d03f9be0abb880dfff98d7473675f854ae76de8bfc2a7db7a76829a7790470abb68428dd3dc77f2446bd113ba009091cd8a8a4946b8035", 0x1000}, {&(0x7f0000001340)="2afcd18773b7e7d630b33314c4f2a85bfb9cd10a821b2223cdfd2ac1643028e6f4f516c940", 0x25}], 0x2, &(0x7f00000013c0)=[@mark={{0x14, 0x1, 0x24, 0x1f}}, @timestamping={{0x14, 0x1, 0x25, 0x720d}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffffe1}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff67}}, @mark={{0x14, 0x1, 0x24, 0xf49}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xa8}}, {{&(0x7f0000001480)=@isdn={0x22, 0x74, 0x8, 0x7, 0x3}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001500)="37ebf7cea4b0cbb79f306935854b978518229912dbc9d14d1b68658d6315b21ade94e71cdf940c7d6d8487dffd958d616e588f6386059b426a8c2b52f8d16b03bcff4d435b890aaf9d49640a2d35e6afd57aac6897ada9e3a345e6e9e4850f0ff697fab8144abe71ccf30717d0ce572a09dd4872f88cec88e2dc9a489f63c8c20db3a48d9997460cc6da089d476a783da49e8baec25629d2b117e07e23f0b3015d4f89b0ae37fc1828995a09de3dd8ad9e5e73c934b8c46a5edeb6948301b2509e63262dfa", 0xc5}, {&(0x7f0000001600)="3118ee160b1c914da362712ce678140c335e2388cf703732234ae1d2f8219d083001121347f84fb1fddd0ae08fe59d51fb734d9a2996ea627ae7befa6bfacdcd31f6f54660e9d67e10ba03f0301e42fffdf25603c15a0d1704fde83079f48a59f8250af013", 0x65}], 0x2, &(0x7f00000016c0)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}, {{&(0x7f0000001740)=@phonet={0x23, 0x6, 0x7, 0x6}, 0x80, &(0x7f0000001880)=[{&(0x7f00000017c0)="a87e40bf3d04b5575538b82f9cdc354f2f2808acdeb768b6c9d7654653e4c6e330072c4076c69fa8cea592d13cd5d0e58113cc16f37c1573a8eb592850a33bb875e371bef6d04ebaa1ffb5f32f4ee109080990aecfd3605e0e525d8db3b7399b89f181db20ee12d8e3", 0x69}, {&(0x7f0000001840)="85db2ddb2aa5514098f1a0d222f732e3c536e20fe2a664519d3f0905e5963fb74767e5565ea6c4a17c98a4020b952e6a1c1caf289f6f11b8cc", 0x39}], 0x2, &(0x7f00000018c0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x80}}], 0x30}}, {{&(0x7f0000001900)=@l2tp6={0xa, 0x0, 0x1, @empty, 0x1, 0x3}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000001980)="be95e06c54b8e64ff9bcff59a04c8cd03f02482493cb2485617f4a3a40ccedcc1f2f975db57a33d636041c5218ba82e4e77f9be5e618a74630cb301b69d6f4c5bbad7c8347120d586d", 0x49}, {&(0x7f0000001a00)="4d6a4a7a711c6c0fbd15294c3cf095c66cf2a7c13c5546b70cc883e053cbfbc776fdd5f8d51e28dd9dd6c591c6797dd5203fd7261de8210c901aa2991634a38585c40326e6dcc11c534f209cc66775df21b4b7bd94810d827d6e6403caac20828a08fc938ed169c43d974d5fcca96f6a62aa216ad56dbda5fd8d244f56e9830987f2b9a5b76f070dddc0baa432ff0bead20717ba7b22f2d427d5222b70fca6c19059549d019adb69e3243c46c60dddd0a14c701fb82299b9", 0xb8}, {&(0x7f0000001ac0)="b2f2e6c90ba55250f8939f68d98df1c116500cd04752effe89ad49e3d80a301d1ff9af1973d02a2f67b3dd2a0358834865cc2c4b7d3bee38929eeb70cb042817a53887cff27577edf8", 0x49}, {&(0x7f0000001b40)="f678d26b067d780bf77b67de56e50307996fee7360c2194c252df22887fc9aabdb4c81afefdd37f2778423f95dc5155475cd44d5278c5c97bc44ced7ec90c66662cccd1f58f06b6d5cb421a038751505cac832078852903edb2574987da0c58839c3f33403ab9951b354c6decd7810e435da311462d27494c892b34e5d224a502e63f35e7209f7e939fdb6409baec07897bcad941a034052687786bf5155051373b048c335035322e6fb163482792c402caa7c16dd18e90410b46783522e9bc8fe0a6bab53b8d87d08c3ecba364ff2452d7a098a66195ca1ffb16e0cadb14db9f490d6c26331373dc078cfc9a41523e66eda6c32672c92b1079fb744e8ff713fc80883bcdae674bbea114ac1ab8ea41032af5e2265c37dd1ac4408371d592d279a659374d5df0c548cf21abf47b693f861567f58e6f4fa890a310607e0dd61fa3b8d758b06f3bd7701933993939a0c4aad74da268c73d523bbc6ff9b1155e124c3e0f27e4378e757abcdcc36d5d3e77d950147d488cea760c8b029bfb3eca0ed810ba0c2dbdc4f4ab5076ad96c454457e149058c74a7ad7c6efe00dc277770dccce6dc495a827920731d2f4354d2638791e2144b8ee124d6adeff7a9c253e2f17ec4f7dbe286885367bbd5d158c0eb40c68b2eba023d3ce104fb7c9172a5560023ee34aebc6625467406c92988cfa321e0cab3023260d7f8cd19cd6dcb3ff18cca9316b3f9740a62535310d6fc0a982b0d355236aec1b080603d6143554bf77d9d247075737293c5239c4391e5673d0631cb82b26e84f87f24b722827324e19650e59ee525124077c5f96a99a6cc4d2dfe63a51ac48dc3b0ed78803257377802c280e0e1a4047fcc9f22a55580155c7b93b15352405cc50d849df554336f7ec3c917b137b1bfc11ee4ebaa8685c94116bbc6e1c84f37740c8e83df566932aba624af685d7ddf1509318f9e38523c7c3aa5feed659ceac15446e8b6ade4195b9c4b851718f72733d72a73cec521d23818cbafd95aad571a50e61a0933f4a2101aa3b9eaa1c4f92675debb3b173f321dedbdd1824fb1fdb88ebefac61a7f8de317d1298de8068683bef4e44e4fe6f77f1e3746aaf4cce2791a17bad6620497d3963678e1a6ee873fb8434df89892489124f7a7aed78ecf14927691a9f04333213196088ee6e4a5c2b9f8f480c698960b5071bd170611b7c447177c3d5298180b1636822080013949adc1383a2cc1fb47abb120a345a422d62b11a75ac3afae3df7e0272628314db051009f5c3d0bc667e0194970972bac49cb50ebf38b63e6c37ca33052e7bb0caf759fc81772f0767c591afed6f5d05203d0d0302bb08d3461401a987d31de84426d22121e8b80cc96f19e92599fe79e87fc88533282b1c2c0ba236c71b437fda2cf5850f3767838faf264a8465e4971769573de98638faf0fe9d4991bdcd22b1e2babed3e1aede21574f9e5741bca2a5c30aeeb8d10a2c9e9fde22e228c7a5436e0d6ed8b2e22f0d799226532e3e32a6844b3c0de6a3ee848b5122c566b3db316889940ba31c0e75401fb490ac046bb9e8fd2c5614b058923d5e38770107a1c1a179b28523a5d3044194c89b8cf42b1b9a9eb237b8f77b878e5cf229516b838e7fac754393f2becb46ec363da94ad2acdd5082221cf61ec5db7c5b82e95aa6c240ec5ba859957b113c2df494b17747ebd9dee20fa6ea969793fdafbe07afa4f1ea3f37686abc6eaaff5f16eeabe8da391c60a186651fbff8f600950c90b5fa8bc6ce732dab74bf2d87b800534c1ecab09305337a65da824de1ea2cd06c33e5e7ba7241216ea9f0ceab5e8c2ffb7c7947f6414619a2334497f60f910fd6b43fe0287a37cb1afe3dbe1b5adbc89cfe495a51cfae0207fd1330b7b530c06f6dd0aa046ffefd81e9d5cd60586957b0869f641d4835f5a39bfa3fe262b89321146c97a92732014484385a75a1b8d7b3cf3f43731d2728b56d231c77a912d2fa756816afdf7e3bb0ed709dd6f8c7efa24e6cccb5e8b70447c734c1e4b775149be3a6fe3c5ca88e9ba666d3ccf74dcbe404d6eb33c8b030d1db263c84a44ffc94d50bd2c7ed5284cbb69f1142a5f7d41849dd07b304b4d3a365a03e2901c17971c0c3ef592666755721862dfa9a979e8f5b7a8740d57dbbd3e9e0e6e7cacd3ecf0ce9b21a9f96aaa97d3257df91d78c2d615422e4cd850c3a41f014c054d66f3de3c0901a27732ed1aefca3b1df253b0e509cbfa8adad6fe6272a39504211f71c0cd8665fd6dee5698b8cb266f23996b4f68539f1325975267cead45ab9fa2714d338722edc2c279481bd418f80b9fa4fc3ca3fa297e0131b7112c838a893d1af69129d40d1e5da0ae46a9cae9dfc41112d1bec51ebdd64efaf720bef09be3e938d7fc55649e46a20563c74e199582128f7ad9ffb68a2bd3ee4389421f57e5ed395c67864e64dd3d6a4ef67c14d3fdcf0bfe0a6717a251b8c474e1d6e44df493f9bd84ca4285848d66220e72a5f3f7ac4447d913fdb48837b75e761aa461d70f9261dcb739c7dd7514f0b2d14ec6f8ea616f8b3910c9f3d854014c6458f4fdf2bd2634e522c25ffb898ecff63d7338258181ced00cbadd84e81a7f2b446ebc5e0f8dc637e2bdb58e49554a1f160956e05d6cd7b7b835134bffbc96eac83c2a5caaade4fbc4263b82f273b9632e6e9f5a39e1b3eb364f5ce6ad919a341208090be8fb3e2a9da52fb01492f2e13047120dff8b3746cfee3edd72e251241df6e5bbef1d7205c50d95f4ec56cd26458517eb532e19d0d9c4f98061a862ed7aa3c7935959f56b73d79f741774ebe35eadd222e02d939958c0ef330f9c16700d4202a4258d68085ffb5e5f90cd51516362481979c588e356b3ca0100b3405ae9f73cb5e6b42b9edd869d429e249a458f8120175c011418423cd4fa2778b8fc154e8f453b1f9b0a0e3916ae41451677c4d535828f8da1643170fd95568c705f13550b5431bf7660367410509c4bf928d4bd56b116b801d38fbd7af32c58c4c7cce9f646aef98d80b022e0ab1e253a900740ff0071ecdc30d414e9e0a2f4bfbeb095617d9642e35562683c77d678ccb82765b8ee15b3f5c90474a49223b828f7024fb8d3da85f035b3bd44d7953e08c148b761352343bc852a5d60fdc3999c79c6e7f6651eda5006929c3e429c36c05af91947c4cffc531eea7409578543f7766c9bc8c9b40a02a1b7b6619d7ab966ff50d2541576e35386c635495856b08c41ed464c80f1751bed829d56cf64c8025aef6c09cc30bfb3e128095a8c862767ba9c746f5974c488637c207a3f491ef4cdcf121d9b434587b3ac5ff1da22231cfac5b9692f3f1458e4eab5fd63b764fe16520b02509b0ad27415beacc7ae12659e8aabcde912f26f3b9b6c338fe3de2a138dc4d458b539339d4aa4fa34ad6b8a92850533bc27a6d2fff23310736e71ebfd32e8bae3ff6413f01040ec259155a31026e3c4c87cdcead886ba02eee86dd83e015830163fb23da96ac70944942c28d0fe72130ce3073f80ac66e053707cfccae765423047d2c68755ef82ebd3376ad363032530bf0e26f1c41a251ee9782428bd7fa9c755eb50d18ff694d37fccde84f5368d4332e8e818945c2a36ae24d6d1c604319fae0a46f4b17b1db777c7b57cfdb7006325252b26b9c87d7100710bc5676f975086085de0236c538adb5f8f0210d1b64228ac4ee6ae0bbf81a874747f5d0dd2e2f5c7f7ae98b4b7fe16f8bfe80e8ec1e804c6a8b0fab2014aec4858f51faac329ea260ab27870675a079cda40611d0a0f77514441d760533c7ac3e24e67ba88c34ac80b036ff0c866ffdfd0fe533d3deba276c44a64209089708b7d78ce7d94da807eb07a9500ad2e47ac35a427f79fde10cd32eecb4b722769cebd3011fd7385f8c037139595468248303bad5f49e3d8732a2728f092675864a0f092381cf23be3b5d72b6668ad48d6116f27787652844d4620038fd4cd2a12888d273c576bb087ee6d1376f559edcf4a9d9db9bd6a507aff11d990efbdb9ed3821af96457bcf5f7944169bc21f03b5f8e8786130384b5a88a91597850ace43425fdfd464e62d267b33141bf863153235b662c5aa8dc35810b47a4bee831bc61853ae54185bf1a8b7a8d1ba553f87715302f46a8f0437ee738987d2f2b0b178fc6aa9527fb84e55ff04f1a1c83b755f96bea707d1eac7d7a3adf5b96c5380cbfef62209558dd8f575ebd90910e83e9cd62907249b66a7ccefb94be7c890910d71bfc269fc4f5418436b7d92c67f2093f361423644ba9b2bcbbf2a47a508b5f3332d6e951a2ce23d861a3869ddb7f8ae08b11676fde46e17ce8d5de5685795b6ae507080a88c91368bef8bcb981862563a598b9a4f634fb8c66f19795649c96acc158503fbeeb122408767c813db91f0580b85b2bb753bde856b0830c1e0097bd921a5f70af88e36ab5a390c2b588a9b21c7551561a819150f94c870462e123909077c67f74a3ccd9f0566f569a6fae37c955165547b8117d4de629937c640f97c186a6301df8a3f4c54adf3267c8b1007ff7a7b09c2e1fba3e5b3fc604ae4ead4151cb5dab3df8fcf5245a9706b6a798ae704b1ca3e929f9e26e68c0a5ad487f4cb49b2e7c551cdd7a231bc4e23982ee7b121df730bc7a55d8542dde502f9e37542c9fdbe07056436cf2e1a0f0b0894c33281abd205cf5902d07f58f96627832b8080940bd765ecc748235e93979e42eb5277671f879d5f6979bad63ec08231146b6a890ed45c0ff0da05afbfd891faa67975cfe6d461db4a6877f92f6b4032e0eb44a1a4f759f1b5b1d170de0ab71bea01991b4a8e45d457afe90ed9556b12284903ad8112300883220abec933fe5cd7a6c13ad148c43cdf789555b3229433042b2b96e124dafa5beb7a25b93a7b39e1f5799a9c4c3a13e961eb32fef4bfce70e7d3df6236e85d2eb701ac5f767d19a036dbc6429d0cef44499d342c8c3283cd383b1d0dbce74a476fe03bcc92cc2789e835d8b61fb3c4575e74236cff9c94989104a098c261c7aa4e270b185b628fa21d4a9ae786dfa8112b899b6e90d6078be63cd639abfb4544dbd98f403802fead33a41cfab2a454a5132fecef24a41002aebc74b774a0e1cae60c81565e53769256a1af44a90028cf1b21aab874cbc528140f8ffcc911e7f682d254b1281948e3f7614186120e277e13963ac773c0656b5a8142a8dcc5d1c3e27a82263baca56bb4e35311d1cbf6789c9c6107939ecb725da9bd28826b04c34741a8304513ed3f8adee70c1c026066631b3c06c3b6555a87ed84922a83e56e236d168b888fe195c5fd35887b4bf8f1f62747db72b086211d9dd2117f6babf4aa3f07da276fae181e9e90988ed4bc29a90918020c8c4940f44c36b8415fff1805529aa0f810a493120c0e6379bd04ad5e4a8755fd4536a5bed2244ec615affa57d4f907d80a61ee90980715cb4a996b2a68e3ea14bff6c9f6e58ce14b807bf6d7d07e0f87528cc1248e307f7f1afd660cc3f2845042c9b95c5460b74a0d36f8fe3631b6c0098ff7a9c0e294cb2313b775dbccbad9ac45c9638c6d19ebffd66fa2722ad166b6acb8e3c2a1ca453b2e4b7eb9b842a96cc011d63ef1276de0bcd17d4c5b39998d4445e72c9091895eb56d3a4071147077f4d8832c82de650eb81137d4fa46bddea057f4a23713d8feda955831476cf69ab82a99737f48b883ce1bfcb4f07bd9ce882de2576e1bd5bc4a248a00f32a6f5a74da43b57fb573892fa7a3cfc3537d456d3eba8fe8", 0x1000}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="ea96e2f1995b2b159a00fbc755ad7042dcab62d2a5f29900a85b", 0x1a}, {&(0x7f0000003b80)="838b03df87bb1567dbdca9ed11e8c5f653a40f6e786d49d2c7259c3386714a3e48aa3abc7d74f7fd8aa1befb2c3e9b0bdf2a70a1095abf0a4e25de27b82d3f5a52e6c71322d87f7f69d90e04d0afe2718568db52c11f2fa856f0f96845295eaf62c20d1a9825534e82b784307d54e251bb1973", 0x73}, {&(0x7f0000003c00)="704dbbcd2382991bc546c97a29ec54aa2c7d32a01892144a7e75c13e93aa2c38c18c1661a79858be94549932ee677db29fd2da9e130ab922cf5ef494dc3658ea499efab1d552210ea62d83910aedf4f7522bdb9a1410", 0x56}], 0x8, &(0x7f0000003d00)=[@txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0xffff}}], 0xc0}}, {{&(0x7f0000003dc0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003e40)="460d7c4d54f23a98ead038034c19d7981a04cf6b95fe0dd0da0ae21dcbe921c90bb4906b7d3285436c5f90eec2ec40c87d9c9069aed83c55967f174f71fc125f95beaeeddb6252e574d4ffdd91a42db066a9c81e7a0831b46d35a87cc1112ee4930a82d56672ed9ee2896e99af", 0x6d}], 0x1}}, {{&(0x7f0000003f00)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003f80)="63c544b8ad8d8fb98a69bdb4ab50dda47e86a5290f71bfa9781c3d434ea472a7fd586111fe3f3eeece2309a527bfbd6aa057d47ae95ec37e27618b968617e59c2e6fbde881974bde190e5ff84a8f4475b520f37e271a09a729c392acee61179d8435f78a902335d6ec1837186cd23e7493f2328dbb1832f74861070f584303dd56ae02dc2131b5128099fc59843bbc25d23258f4fcd520bc0dfadcf81376bf6dc6351af5", 0xa4}], 0x1, &(0x7f0000004080)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x30}}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f00000040c0)="9f97a39b238e2a695634cc900a02a3535184cd74fd998a96c8743bab6a28a4ecff1d9afa3870eebbad8ea2ffab7d53b77d", 0x31}, {&(0x7f0000004100)="91942394619e2c39ee69980950687a9ea93560145a6902c354a5908a4df58bec7115f4b36896f39a1e12f795dc2adce454a7cd9ee7ccce87bfd381b692b462969c26292b2dd6b5f44ffa5762b1df5f16757a8a8e23f1f0402f283ea714b536c2034986b5c1830866f7598971c33b97b9d7a5a61d4d79b1127bb43c959141444bc03bb5b18eef1959ef17c9b2237022620bcdf049e5144133e99bc4013655ff61841f9ef26612aebfeb7dc04db8d8894a4f24ac0ba8e782c55fc01f623854420aa6eeb420a6481784bc050ec4a353f1d631ff71034312448164d020", 0xdb}, {&(0x7f0000004200)="9720ebf2e2442ac810f080d029e86ebecbdbf04aed7dd0615f0be36d75bdc398389fc9a406ecc97e68ade1c9493cd9469a576bfd11561aa50a8bc9dd2b844a18e6162f12e33850af0082daa4178c9cac8b499a5ef157054e0ac89afca49bc38d9186ad7321d5cf9b3904303b9493e576476c18728c9b19cbb93f62e9a9b7828f7e4550abad3b63a6eb43e9f262115981a7e2dda8ad4cf9793195f5b0e3f32f78e7e8977c242dc3778822d2252c58d2d490e8be68390d12a0ed5998dde6edbbc898e120766d471e60fda0f767c2258dccdb1747204e0daf4f94460ac996cfacb023198fc5d9ccfe260e", 0xe9}, {&(0x7f0000004300)="e9e3f4e442a3", 0x6}, {&(0x7f0000004340)="ea1830d93ab992f226fcbcc0c414a6926436d1ce5cb45c1982539041db24c848904606ea42a69251c2e5c8430698161d20d6c55d342b9f7b6f9abcabae5f376b3b07be2a8359bc01ffbbdd013f67267e29899bb0cc98ca0eca1cedb30aa5597b396c1d400b847df768116a2189e225f5b9cc", 0x72}, {&(0x7f00000043c0)="f03fe8a4b95d87c9f69b2ece64729ae58183f312228951d9013c06ee3a4505a7a8fbf2fa20fd2d277ab1c008a5666a3fe87a7daf06e56d18f8d25b15e2ed1350a8ed46c01e0b5d3b90651b0bf992fe47f653dbbf0d356a2c0ee89467e4c8943c53f03f97cc1bde0d5caa0490380ea02dc8350fd6db", 0x75}], 0x6, &(0x7f00000044c0)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}], 0x30}}, {{&(0x7f0000004500)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, &(0x7f0000006900)=[{&(0x7f0000004580)="25393003dfd7f601da3289c852834415971e1fcb9105ef78787704b7f7785e50d753f2c6fbc2bbafa3f5c5d5bf66e0099b6f12932a4421c608588bbcf44b02b3c4dcc7519c145711831e42e6896780a553adb4333fd82ac23ccd1c159cb91690b3b40d9ffc879ea5027d0ec0dcae656627dc4611d3d0a3c61b2b4c", 0x7b}, {&(0x7f0000004600)="fdac3cf1fd506efd88f84dcd207caecbbfcc58bce1bdd61393209445d0cf85d3803d1206145c3a5ee911b8a5e945e4ff061a5b922e0777e92a6163ecb5ae4c4c88094daf920bafb23aeaa733962e838be7c13555a2839f9b83ad329d07f626fda7c2274b60", 0x65}, {&(0x7f0000004680)="e6683723518a202a4668", 0xa}, {&(0x7f00000046c0)="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", 0x1000}, {&(0x7f00000056c0)="5dde4f87aafffd8b82f1d5fc42171fd2328f5da3c6b2479582b21ec8e3d659274401aa5099bbde4c75943d4faef9dd381c000578b4aa3387d6ac77f382cd84f8079bf72589c36d99fb5449f0de96d56e5b81341c028657c8dd06f0c9b56ebd543033691cc959937f74fa35444885aafcea8cad61f9d5c5b06987d8a308bf7deadacb646931c33a2cc6c5462a4e60729b9587e1d9173e647f65cf21b83344bd02fd644b7b1f68165999b2ce36ae363ff861f0c9d9a2ab31677473d8df152732d175e7c78d9c5b4f4b9746e57722ae489840cb5bb19f58c027fcd86d7ecd73f5c74e0e23ccd8356b56eb5a5696c08d4492df87cf221571de1bc745a0b2477e4ab965c95eaaff6b6699b9c53dc3a75d080223be3183394ca4fb8d083dcdec65e5f271a5b3e5e9c68209aa08efdcbe021ea38bcd717a1b3f01eba126b7011c8829bb2a1f0f5614691f9001a718373356192299a90b55295701672dbc977f56bb93ba1a9f52c22f3feff4de6ad5ccb08387bb051297da9126c8c7dd4d96139000437d38dbe48516b0f69aad79185215ce3e1bae0f3f141187b73c289dd2104ba0eba1910111921921242871a6dbff57519e7e60bf808e8ebe79bfc9ca224fc1f9d1630c4b8e2c773823519cde95b7ae295b141c0c77f359d3e100a2b3eedebac84cc04dbd3d52ba7a667e5202393f905a483d79d678f389229497a5964e26c546022382009d0575dcc93f11a2609f83ec5dc1c9c46cb1dde309771944d191aa1d73d0000b4e92bdd4e55100eefb9611bf8a1e5ea269df380875610a5f9073f4c23d89f8c6f0081bae7b0e1b8b19aa711daf71d32b24d783ee4ecb28778543a6ee6e7601e930b65427e3845802b8d997758dc54a7742197577d472a6fc33b9a309aaccbcaf62309670723e5b1a9d440d6e38607e3d5399304937cd47256c9a209ac746b7a535c9d87f21b291718eb1a7210f4623c51e131971ea022f6170916e15a5cfb1c9dc4ae8213eeeb9fe0e6ad46bf5bcefbaac87013de98cd875829e772b1336df8076a9b69300a7c5e9de3d3f2c64e2472e9654901ffacc4d73bb6c844d5d45a1c552985c9f7b2d4a73ccfc5c043e63134cda40b0a7443eb3ea8276c6b6bed2a89051080c2d2ea0befebcf340f2b5b49c5bbdeeea7efce22a6d6dc80a0787d82d826f4214a45f61bb60f5500138541c10c8e8057af9c94353bc3e6128bcd6153b31d52443ea880791663b2da1aef09134326c6a02f922708c96d0a53f7c68fe6bfd5d2bdff8807f7b95d8f2bbc1ac35992e2a7e70975c1464131bb9cd362a63808e9468034fda39745f5c9ff139bc60efc3fb5e20dae64e6e28f1e46c3adb29e675884d530965c86d042e2014f6d0aae249a46d70b0e81b3b4f129f6a18e92e97d43fc338f8d79705f0c7976cb547c2461e9588306dd0284598fa2add2acdf5e358c1b076b4486b73297312bd22ccbd052254e057d65f44f76cc28df62e674bafa2785279d4f8e11c49a1309f22cadadf2083aadbee2ed054acdc76bc8cb20271d9ad786851fc4ee463adfd23524401afa576f865a83c04f70987ba97035bd71daecd5de24339dbe6b45bc14e867d9fd9a7e3b3074c61a14c62f8e54a147ef09d83c52a3ee84b225f882de265c99bc6a1d5dc953455598bdf0b09ccb5f84ba5fb8a37452ceca6779f7ebd8dd67ca8fd8ea5661857511a02b1faa2028e5fafbd4920795085035e3f5127018859f90025a1288efdc4287b0cc4a0bed12abfc28d5a457a3adee3ef4435d8941f0da379686beb6e6f0d6fc51fbc728be73133fcff687be76d07511f619ad449a14bed71f0bb016cda2160b677cde3bbe12763f27e87e16c3c0295c4194306d797f9ecea57055c2a7a8f6260d1579ee7185cb358a95a55c9393edb96f3ba33e91ba3216efa31072e3d97631d4ac1a0d0314b8098e6c6013dd298e0d68678c406e4bfd6676f23f7ef7e042681ecc5682b22770d59252f2aaff0e135ed1f9f095638d8ffc81b4b5b71afa83aca7590cc5137e9eca1c8491017f03994b614ecd45b0a0509155b6ee48fb23ff62ffa34dde0e649ad91e32e64c9a902df59ac69ec2743b17ef1e4f0b68b7b4aa874ebd621cc4105c1f86b23fe546ef545a7f6a29d937993d7f55cbb84c3ead23af75457519262563706f9f6005472bfe7a83a7e19127c20ed94ecc263da0847eea08d898bb8b5dc27165766434fbfe38729247cfc04cfd7f80dd4c72b4fdcedebb1006855a542afe31a822c451f627367f966c21e3553cea4759ec8f0defaa60e04dc8bb45dc74670175153f2b8a4f2dfce917434b28e54183e9d081ae295a8f725cdf33b52fc12272116129c496852fd089e356798ca4442e73846b3d48bde0f0641cc7c8012c48b0239f4f9d3da01a588afd93dca758a2eed516ebf097c997598ae1d738ff30e60e1330a3b4171f678d116ae909f2f6dc64d6a8b1217d0f56481a50e61d271582f6e8e67b5e0c96495cad3730303310aa0889941009389c34fd08702ab6a4872de7df1e6f3caf0d678b196d215de69deff34959e5c19abc3daea5935211ca0dcd0abde0c3cb45f0ba52ef1b48b1412aedd4db780f44114e75f93edc43acd2f8f9a85671941662dbfdc2fe6d9fd75b3e5294b866d9ab52cd23886b6d94d066687cba3dd1ab05de54cc56f9eb0d456a9b4b861d253bfcdd905a9579c752f16daf14696c57e7456e42a6c1069d4cad24ce9fd7f27733c16d9cbb3ce5f3d1c80f57e9deb428e10ec12677502c074b59723333285334122376b3d1ff04a4faa6f15f62214b452ac92a15d6ffc117323574fc975d0052bfaba46987865967ed9b2173cc6ec7d953b02f806e38420ae6499aa71204bbae9d96589042f0a5a9fc53bed1dac69d2a959f1cd1d7a63bc5b5eb56f52883aebd576a509e60672e673b3fc271670e263f968061c8a1d8653455c64cd1ecdb49c9497b8fe087f91041381cc1ad4a64970b6d56336598f56358b58b4600684f641ecdd2c3867b73087386b5fccebec234287c10d74137a7304cfebca27541bb76641f4b8a5d4ec53f92a698933d0cb10c716a27fb0602ecdd39879ffedd3ff1b5df1ce5144cfdb6c79bf7a0d822f047fab6c929f8940c51a907e72704e99f43cb4326c0a92216c518e75d27dde944b84d826fac72a4b0cb0647e0239c32e34c01dce35413a99833def4cc5206a77ea8ce2a175630d44a0169bfe17a4f75924ff32306ac7e1080c24509c2e765d35735a3fb4bdb4662f8ddee4986a3ac51c0bfdd791b3d68a43b6288130eb51c3d033bb452717e79b82b81c217612e269ed63db6d761038fc800cc394b417cebdfc8d5b1c5175611c93d253050717b2d7ba5d3f8a704a5e26852a1658e1f5a0263e8376dd35b6cd03b0194d039c16d43ecb2081c29ea06dd04efdd4a825eb8ba6f800fac4a2f654c44a02de08853f7b38101d8390bc57b76710f41c920e66a98e875867359f57fb1120ffc24677342df3ab7b8bed4622be71c2c67bf3de84d9f81a3cd1566490525758900a0262cb7b3296f51dd898f3d3cdd4a2a9269494dc2a0ac4fa3f91251a6ba7a9ec12ba1f110a67f611001fb84e2ec0120053b87e0c239445668e431c7d2f560acd99063452aa90bba69c62eb28f1851fd72e8e077f31e830bf5083235433fa3fc79ca4883a1a39a038e73fe25e8014e84f9bfa292a1f30d9e071a978093edf042c72f84ec23fdd474845f6b6fe664b9e2df3ca4204d083242fe9e362177ca1e9e772b69764f3ae796f4b53dbc0b40923ffc1b6983debafae847a2aa4bcf8eed45119058ab8aa73ac9c8e5c5af45c43dc07f18952594fde598e39661f8e11f7662aa7ebc2c6af137e9a5312cb8f62c85086fab1d60119dfcfbd12af5396d2ec36cb4bdfa8ac2e14d1a2134a1d352643ac8a356becfe4bfda7bd337a17a434fca27541a09382b02a2621eb0de369ea471423ab8cc7a1410ee7a27e92bf418ff4dba37ec628cca617d1f999fb4eaf9e9ba899426c8313e6f51594cc962a1673fe36845630c7cbae65a84d8e85c55eedb7382e1461c5f2b105c683da5ca2efa2212a834db39f208343300c10db705a114b0454c9a16facf8b33887fc02aa1d2df32a82c55d050820dc81fbc19cbaed5a32ca6a175e075a34266abe97623b76436d264476d499022a4f8b1cfa8b63a13c04b1680531d447b537cfc9ee03bd77882e97e10f083c2914ac1ee3ff83c446143b0ebf0b9d8be80533895bd00ae0ce3f7c165322108615cd3961915cb21c24e5d0c0def1366b4fa42f0e9645099ee1802921b40f74e6240e6980387a8a327eb428183483a849220a09925bc14208f48ae90a5a9ae0baba4dbd99d5e8a0513004556fcf8202a020e7e2e9275e2a4da5082fa6abfb0de7b5aadc13ed2cc06af7ea16a75c18eb0df2d5725fe7dfb4a0310697a34ae93373cf5aa816c6a292abd0b0b5217e3bcbc0c2b5c8aabe4f2d589fb11c189d5bfef31a3cb359d5eae82b9ba24dca5911ccdd36f1519bd17fe5f1eee89afa660fa0982294d55f52fd79c1bc8b2bbcc23f9ffeb832032ffcc57295a1804131236153f41425fd7f14bfa40224c3265b8aab520d0dad38db08c7619b40e7fd238076a2017f977ea3d4afabcb95d8627bd70abb4e71c47cbddcbb016f1412b921dae47cef15c351cc9df29ffefa255c30133e61cd360367f7ba9e991943751b52c01f456ef93588a3e56e8dd16bbdda6f050c71e2d39a1c7aac853c37231c3a21baae2bafcf35b985fc717c5f74e9b4b9db16e80c33b35199476843649ef38c8be9fcac6dbd1dfb944af5c21e8a781aba4ed7b0d4b5dd424a955961d43bc58b589f45649866da86c244b99eddf63a5ab55a09de11d9105247266b14fe9f9ad9d1218ad8988b9c999f2a574443dea520c90ec7d4924a275b5839af9f6863ddb5af0a76debf81fc621040d735cda7ed8496fac4d0ffecc75e857c1769c12f17eea821e7b15a2de92e339da5814ef673b1673bde7efd35a5023d3a37ea220e02ffa7f1aba4bd78c04f98b7671ea2ac19c422260cb8c4a54d921abaa0b0178629bc3d401c7b8ae1e3214bf63e63df2d7f83db5e5dab2e742cbfe473f04e5c11e8d32e92169287af0dfbadd65fa1601cf3dd1912f1197a53fe434fca06105ddf9d0b69c84ffd0c1a9d348913d29ac218c70cc10f9145ce77c6af57558cfdb7a8738375552f916b227277173235aa92d890345adba2e5857f49c4ae216e0743e525e005b168f194bcb6233f74e6d50ce8b54136ea0c98cb6dfdfc817fdff7754975486bb2413ba4edf23e22facb5a701818ff34ebd536a1754aa621606e2fd57ec40522f1f9b8ea3c9f21336f644305647ce247baeec4e74b7e85ffb382966f36906d1777db77a0920b05543ab3f9a6ad3abfc1e691aa5df07cf04c5e2afdc022ed4ae8847a00cce9a2cda7da5ea3d4daac8546e99229883819be2a1358daa3c72aa20451005f2ac6f3d094931ebbe4347463aa394d64044c2bcad769d8ceb673d614b7fd8ee12f3da4cae0426a040a833cce1ea8291d34108294ee28adebdd38341acde155003e04006a95c5e25e697483e38881c61165063fed239c6e6ccdaf13b2ef090651b4ba38cec0209dcd7b2d9adebc1c997425470d4f6aa7b84a740075412a32977955e86991477642fd81ee643097436316f0822f3cd37b5c9f9535a3719f794f6e9d7cfc0cebdafe4b260fd87a602bd00b92fa8ee7479e8462e39f3e4e03d193864f84e51eaf57f8c5751557597bdf4b6ec2c8ed633e03da", 0x1000}, {&(0x7f00000066c0)="62eac937c4502b59538d312394f7a4ada68445ad547aec94482849be4320d2ecc855a62e9aed5671664d5bcf95a6d0177892dde3cffd95d0c8300acc7d40cae6341b5556dd0bddc59cc4823f877a7ad037f93bc3b652867dd0be8481f2818a3440790e3a23b3fe1731ce8b2d8b8d185dbc0f782a8c84746bc3e4de85143e6f5148b2759f", 0x84}, {&(0x7f0000006780)="7201edc3833ecf88c18c2dc4e12281a4b3fd8899c730fbad183804a70b19a68fc27b97633c427a633b0c3650bc7866f11c97c1e6d474f9a5f571d985c6d4cf3863f9476f0925ef78266afe4c415ed5eee640aa2d59e142304cf0dd2bc91d64c7481ece5c2e74914b98e174390f695ef34c80669d8f4e6d0feb5dc30cbc1aef5bb406105e0a5e4a34758396d59f6e66c6750074ed9f53697668b3c9763e653fb78cb57b98ad0249854fce0f0f94f28138d5f76600de6505dd61849009b95b708f", 0xc0}, {&(0x7f0000006840)="6bbec524ed05a6f601e7003afc5ab5e823ad3c489d681a207db6c3833c", 0x1d}, {&(0x7f0000006880)}, {&(0x7f00000068c0)="c75b37b98762a063acec18d65be1e3072f5443ffc1617889b74a683b5777fd41f873e4b5", 0x24}], 0xa}}], 0x8, 0x4048811) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r3}, './cgroup/cgroup.procs\x00'}) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000006bc0)={{}, "a70041dc576ce6c9b5422a432f884722772f19168d3a2411bb06a1a3bb09e74a0784ee676e163e90c516bdf07f955fadbdc8fdf9ac1a7fad338472756b12a3e30db6ffa60176b6613af44df732fe2c88f6555ac1ae86e4637bb62848b2b9f7391dd06a03c071d2bbb1e668e108b7d84225663c78d604771a0a51ed6667342ea12db894a4d020d5a519cc7c286fe1dc7787c6a322b3a621b7455a24880247feb77fe005d70a467bcc565e7c94972973a919a91ac941edd682cadb3ae6e7db43fe427145278dd1d2a566cfe1fc2b7480cc71903ea08445d631d0ae2dab0dc88fcaae77c1fd39700c55c2795f0c4314adb16217e3e5d3cfd9eb5e5a0ab74bc697a7f6730a98c19c7908aed39c02ba558048cbf3157bad68592fd94a8b3159ec1784a3e4f81b170b2253fd8b1eea98e45f7833ec686f8d417ec827d373ee9d96d64cdd79d94e3067b011153d4089949291c5bf1752e33cdc56cffd0df784e293c99828fd42246e2aeb1804d8c0f6d0c2635f68df7c02dce461a1e50280c54a1c851003b65fb49f7515fa1084645635834f4eb11b56dbaf314788c0837ea6894b8e7172d4dcfaeb4c9921fd9a792c6aee8d194309af197cd748a64cce8a77881d165fc8036c7e7fdbcf85641c17866216466ee5b3981217bda00f294a4c8cc7aab3f8cbaec2878eb0059c055e3f21167bb0cc073f73e438096c90455ecbb9c2523881c770cfb8d98d95ce39dbcad12c427b0838be2105570abe7e885d0501abe02ecd93de047765fd86313c9745df433e9ab8c1c843a254b18275917168f5aa56813c8ea1ba16b82cd27fa99f172a13da682f67b5b1aac7540aed19d0f78f6da16538c600f3aa4f23a60c112850260d2ab640c74114d05e923ca71fa67b7cffb70d6be35646eb181b7526b8a2f3ff5aa9c943d801b00ccf1e22497f82facf69d9675d04b0c158526692817d0d7ab1a5b5d485c7cc968b80d0b014d825e22ce56228abe9ad0d6f8a4e93f98db5af922f61603cc5057c4383f6f6dad651837eba90b873267a576833ec63b9dca673bc6ea4223abe6ed1762eaf674bf72ae64268153230ac0d167e2bb3d5c3efc2f262e235fc522be23a11a5af0f60aa73c1b1ac7040be797de5aed62ab0254d6a5931762bac9f5dd27f89bc3b2e56e0694253a8d308492f83c57c12610644eef17dab0a5707e35372868ee5911831d9b35663f1ab825ea3724d7346415cb8c1b5d3b1e4ede9312cdb7ca112a8527f569d59aa1325ae5924c05c2bdc81e639333e9014605e2f40584cc6d42d96e39df92b91919630f5a7bcb24fe0737f303787bf0c8e62fa9e26745793fd35a935908e74915d446e4dfd8309f104b56ce8b5ed981bb3ee49c2908a65afea54ebef78fc0e7af9aeb57164f325ba1cb898f1065e3aa8b90209de698e7d5607997b75233d5b4cfc07fd15940f9b68bdc3c7d164e571565130f62e753a5b269255735a2291793a7b80f995c4569761b9ec7535747dc1fa23c8f3df26711290fd6b7739da709af720db2924784e205a0d39c2d734b41f8b59ce599f0f88a268fd867ff24ca2b9aa3ffe43d9cf54232b601b7b5f510ca38583a56cb3ba1cc477a47e05bfe515c7b77f9212bb7d103052e19e98d98e169c7c9de8aedd70216762b1dd5ff678aa9b333b6ae19abee112627e01ff168d3c1156a56bfe605d5c6e5d17357e6c4a087e4f7930c83265276801e220dbb547b8df9b9f87faae153f98da5097f213085b69141b6afbb5a5e7d150c805c912a71bf00dd5a378f84a65a331893bdbe17088590a11926967e31950d5a86d2cfdf230b70cf1b2dc82dc61a526e98d73dca98ac79d3cb459a1172348cbb1e1e86de8d8410c69dce1355ac9d3dae5afe24f0bc60040b4b4806606a0c97ac4e9cf301680e35665c4fd63e2e7209689bda10dce5e9b61f36f018a4c1d9e2093b15c42e10e951c8d75fa9604b28e35d0102bdc0ac5ce5532f3e62b2d3802734ece2f2a0d4f6ff82dab3fb218508fba0f1cccefb9f859ef2570f0f70df4e7e47413e3a3e56928463e9271c5ee3168a148101930ef4193754750ed5c03cfaae2a45991362effdc30336719f95f40a309138b735a0be41289aec53654d3d59cc3b7d17e2c4646ec7d747a9a3b0df2ada57e5fe9670cd3ac81a3069920b5fdb583a5086b13683094e76c0b3190db3aad4d0a51a3bc8b67c2155160ffd906e652a9dc567628c941a67b8c8676e92c7dd3321f9dd1606af6533bba1e4d46287f83ef937ea1e9ae466fba43be92eaf583f7d014405ff26d71cde05e63da91727d50dd5a518e06f240b5ed92ea9d76c4a8443176070c7ed45b49119d860abeec9b13472145459f59ccbff21e25d20c9c3fc9ffdec508099ba74690d356cfb70038aa9df4d1f401a4d983b3be7e0f007fb05ce56bf30530469f146845826b4119125cc9bdc36f6b3c93c7171ab404a878c8474e60a918774cf5b65cc346229709909384a7ac650171a861af715da3a6763b374da016c8f6d7e17a27e75614591d20542ba77d7577a31d2a51eda166f67c245acdb92375b51ce77f0e18343e96b7433b906ee606ea756b02629c4c0e15189ec1a240ce697e833356c1e6873b1cd0fece9b37e9af797c5a0428de331798abcbb10d2a6f5f11710750804dac25750445599f3e403d5123257ebf923ae5b6f318a3396ace2d3891baddf1a1eb8cb59a0c73f5125e75f5571567b2ed7fbc6588bf76f9f7049451665a0c74a69f8cd8ac66ba8ee9aef51e8a7efdac54d1bab29f20cf335b95dfc25f403a7622c0085c1d1ed1ef97c736e73fdcbba1dd3f1870f3a8472dd9e89f7a300be9f90b00df31e17b3b951d8fd425c7bcede40802f83ae7994aa3a0749b1ff9cb97861f6154b09a5d20ac6184b9ae60ff28b8b9591c038b86c19d3bc0ad64b8379272a2dbfe6ac62706ff264b5aa3b5f918b275322d9ed75a4d4e1be14112cf87f4b127d2a1e2eab4617874befab0c470b0cb3b80c3490e7da44cfa2050bc4c28dca82e7853cd95614f56159682c84106efbc8c7f3d00afb19364f1e1fdc9b9e63acf1f9213eb9d45c18090e1f6f77a3735697817d4b8336d3f9393e3bfdfecaa5122d13bc5e5e50caf0a7798ed4397d5144f323889825ca437cfcf48a06390575f5b0f2e632d2feffe2a85ea9cd103142dcc61bf37cd04624f47f7a4460a4288ed5928e7fe040c07ef69721f88f946f0fd071ede0d7c71ab7a1a5a26996fcd0e4cc13bd8baf97392363f75947540f87c7e56052f62d460f7438ba067b4004d74676e3a259a3516e84f7e60ab2beaf8804fad26a68477320d7667a83fc2a7996c56dbf997c9372e6bdff5fa81e3b2ba3036650eca79171d2202028e3cb5d1923e97982150dae16963a94bca6f97f4d9777aca4a956ed0f1f02e08798a4c9eb0c01507f1cb16f444eb41024af8cc7234bc48d71c2da72c8a5ee8024ff9607a2ad0f91bf1b333a5b70209767c435c3b3af1d22f56e9d371b19619d979d7a95f4ae85662fc57ae8dc8b543760f0c9ac4880e16f196f5e55645d32969f8b2222d8ce006cfb7ed75d1da775862a56c999d20aa3adbd8e54d86c48200e76e0770ee535264a3a7aab7bae22c3a63c8504423eecabaa092f58a591a43c692d55457d58033f3a0160e8b80f231e7da53d64ef4dc091645ad53958edd5e15296700255cf5e1795aae05d866f26ea393f67d64896386505edef1d2b1d0790e7f6a96a0dc7e52b756c7637b14753dcf638747ea16d1bbf750f13d5466672b00e50b78d4502c6ce91ca548ff35f8f8ef5553d42e0198c9738a3a1f69ed4f92395de38b0a9bf9286d70a9bd0f92e0ebd65dc149aa24eadb9b359cb5fc41235b4e0497cdffa964179901a7aab669d201ec2f70fc9fea6539a5e2e139585e3f5b1935570cd653aac3de3583aae1829c0754b94aefaa9c65c24a7ee68ca6a83f190aeb45654c864871cc0c169eca3293738d777f5b4b08c368a297db302d135e1afb09ab69b3d47b4d26cacff623ba48186d4b7c71265aeaadff54604ddb90e24278de7e99e1917cca623f2cab57a195cdc88848eff96c4cf3e99838bb824a116c89fdba90ed3297af488c3798eb464407b88414e0d69959fca9bc862a37db0bb9c96fca3b48388a382932768c736b4eb7aa60903763cdd07b190fc329bf32436e5f9894167bc76eeea56c22035697592e8734dec63ec5cc308e7c3a23d52db5e3ee6499771b3c638273bc86779666a4cca619732fc2d920dee1e397167aa85a010966b9bc9b50ab7a4196adf72e9d49805d642d247f0a0ff39afa632bd66be08509a3b3aa6ad56c5fdd3b321a325daa488f872ea2a086771ba022f5ea0f7cc8ad4c074e29bb95f01aca9fef8abef5c9a2900b16462e3ce3923ebdc0b54c688e718166fe9e9fb23bf17cb742d51fb5073aa41e4b1837013bb7a53b2579321b2495b43690b8de4dbeb1969042ef7565764cd0514efeb3dbfc5250da81c2f105890a998dd86cb556cc4d9cbfca11aa2a0df2931c4619302541a17ed6850c1b51c964e01161b69359ae4ad6c8159b90b1a1e6025616f9a0de4ebf4c835ef5b5271068adf1ca7fa3bc18838656e0b5374b6a844675ac848decf75bd365fadbddfe91a5b1b1914880ee4509fb872b964c73a04a565d3ae8be33191e057bb617e47d3082de41f038bf78337d6343b873bdb757b7e2cbed5dcf55b008947af12f5c55b8f94d27552e4b049e111c48ccac53e27db4dcbd03ee1421cf96fcabd948e8fd51e2d7e818ec99d9ffc1c7c267a238e970e22acb55a83b047485706344e87d5ecf1226ea83979f7f7208c3bbd9efacc68fb10d3492dbc0a2b6614872c17003d37f72557cbb02d32f28231d20d1a57c3a1df75615ffffc7a004cca1fd0da6a18d6c86d112b527abacefa3e1aa82ddadb01f92ed28015b22e04c98e20f8398e5a11e2ae3bce6032b388e964b831c493bf92fc9ecc2d1a118fcb9c1400c801791430433f311b1f4bd1725208e49f26e472cb53b0542e9f415516a5f19beb1ebc98fe100e3eb74b5af2c21bf8a277f0cae3eabb7b7bc082efd8ca8c2fa9d678ea0729b461c7c42089a33d724c51bf1879501215e13c05617076ce37ff4b45f4755ade4871b96799e3fbf9c102caaa207e5317eae47040c97f7a9cc9abb2bed3e0e196e7a86de76bf7da86352c1a27d764528a75e9a558d241e179a132ab9a6e96c7473dcb85c5d4d71b1bc800038fc8065cc75107d6bc2ea3eb6c167e0ded51d0e0bac9e5d54b49eb202918183e3d22c5ca9c811a51c2bec28e66394df0624b5f9d246d4c87ee1dfa8e192e22925fef8fd5cedee7c32bb9ade288bde71cd460e4ec504c857c52e87f7e54a55810b1e2b419f35984f3a2be119feb9a3f713550dc01190964c67f87c4dc49b40272f59419c6a75e456f9e41493fdeb6e42e91c3434bfa659a9823caceb150f2f18da539ed90bf6e2bcc801cff5918eaa89c0f6ce8626a6d310a409d6054c75de06204babbaf6f83be4557e37d159dea18ce3c1878515b45cf0373dcc102b272fdd749eabf666d05045733b46152eb0f8ccb2d1d9cbfd22f486ef83d928bc28b75bf765f9cce9294f99bc4a716e4048b92cd980e57db6af4cf896575cc33e77892a48800e077eeed76ab3fdf0a3268801e4c8cc508b2bbceefc28b3ca6c9aef2650b9f5d17b888454085a59a2825f42db54eb9502cc7dce436a38348fc9074ba8fe4272c2486cbd5ade56c4f627fcb1eb528eb1c0b8ae2507aa0561d68e09a2"}) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r5}, './cgroup/cgroup.procs\x00'}) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, 0xfffffffffffffffc) pread64(r1, &(0x7f0000007bc0)=""/93, 0x5d, 0x101) 04:37:54 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:54 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:54 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='comm\x00') write$cgroup_freezer_state(r0, 0x0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:54 executing program 1: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000140)) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x7aab, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:54 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xa000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x16) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 04:37:54 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1735.137540] tmpfs: Bad value for 'mpol' [ 1735.172759] tmpfs: Bad value for 'mpol' 04:37:55 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x7000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:37:55 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x62c, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:55 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x4, 0x0, 0x0, 0x800, &(0x7f0000000000)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v1={0x1000000, [{0x1103, 0x161022be}]}, 0xc, 0x2) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x8000, 0xfffeffff) 04:37:55 executing program 5: ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer'}}}]}) chdir(&(0x7f00000000c0)='./file0\x00') mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:55 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xd2a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:37:55 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:37:55 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x9d8f405b1e3085ac, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) [ 1735.353911] tmpfs: Bad value for 'gid' [ 1735.354676] tmpfs: Bad value for 'gid' [ 1735.365865] tmpfs: Bad value for 'gid' [ 1735.366470] tmpfs: Bad value for 'gid' [ 1735.381302] tmpfs: Bad value for 'mpol' 04:38:06 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:38:06 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x7000) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x15) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 04:38:06 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140), 0x80012, &(0x7f0000000180)={[{@release_agent={'release_agent', 0x3d, './file0'}}, {@cpuset_v2_mode}, {@none}, {@xattr}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) 04:38:06 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f0000ff3000/0xd000)=nil, 0x9) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x4000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0xffffffffffffffff) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x14) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000c, 0xffffffffffffffff) 04:38:06 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) unlinkat(r1, &(0x7f00000000c0)='./file0\x00', 0x41a40aa383e64845) 04:38:06 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x10003, 0x171) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/packet\x00') setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000240)={0x88, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x6, 0x40, [0x20, 0x6, 0x3d, 0x40]}}]}, 0x38) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:38:06 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget(0x3, 0x4000, 0x2, &(0x7f0000ff8000/0x4000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r0, 0xc) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ff8000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x401, 0xd27, 0x1) 04:38:06 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) lstat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000480)=""/208, 0xd0}], 0x2, &(0x7f00000005c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000680)=""/6, 0x6}, {&(0x7f0000000840)=""/129, 0x81}, {&(0x7f0000000900)=""/222, 0xde}, {&(0x7f00000006c0)=""/12, 0xc}, {&(0x7f0000000a00)=""/197, 0xc5}, {&(0x7f0000000b00)=""/194, 0xc2}, {&(0x7f0000000c00)=""/214, 0xd6}], 0x7, &(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000020100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x118}}], 0x2, 0x0, &(0x7f0000000f40)={0x0, 0x3938700}) mknodat$loop(r26, &(0x7f0000000f80)='./file0\x00', 0x800, 0x1) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x564, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="668fe6775c68a6838bb1ac4bb1a5bb8d873ec7ca8c69b27def2bd970a3ef7c179858d346a927cb1955da29c3905e3b42b51a316d65d7be21de408c19e2c805f04a9774740aacf1d79d8fc2e9b4c9dd285e6e1dd10deef16f24da798d29649e8b8877bb495ea3c8075309291dfd7cfa7a79940d324b9c17304dce45b0fc45b5bc07abb8aae696109270932a1219504a8998faa8f0fb3c12b6cd77e6fabf81177cf533b5b7992af2681e7ea7c135cc6deb5c23e4d5dd1002716d1509140a5b1d98004b0728534fabdb7f05b8caec802501cccc2424c2e27548a8f39718ab898149bb872058599bfbead7238828e50f8c2a0f932b59f52f72", 0xf7, 0x7f}], 0x8, &(0x7f00000007c0)={[{@uid={'uid', 0x3d, r1}}, {@size={'size', 0x3d, [0x25, 0x2d, 0x46]}}, {@huge_within_size}, {@gid={'gid', 0x3d, 0xee01}}], [{@pcr={'pcr', 0x3d, 0x3a}}]}) chdir(&(0x7f00000000c0)='./file0\x00') tgkill(0x0, 0x0, 0x80000000) r31 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r32, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, 0x0, 0x6}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r33, 0x0) r34 = gettid() tgkill(0x0, r34, 0x80000000) r35 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r36, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r34, 0x6}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001080)="c796eba6eb0e52d02283cae6a07015ad9a9c69b779640804e301a15befda729f8cdc13f32564bc4cd6ddb68a4a2f04303ed06a29c4d2d87ac8d582ec85921db2aafa9dbaf60442829b2f3e3c2395ed906e91624d83c1f32103598b693d", 0x5d}], 0x1, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0, r29}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r16, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r29}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r2}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r3}}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @cred={{0x1c, 0x1, 0x2, {r28, 0x0, r7}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r12]}}], 0x148, 0x4000080}}, {{&(0x7f0000001ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001b40)="2a7659657a7e8f82f289328f771fa0848ffb66e2096c10c6bb2ccdc813d161e282dda6e1f302a9b82756716a111f4c57439596908ccf8b4a1d1535ab14b352611e14296257fa9873690160dc3e5ec2f527665e71e92abe9e310a97f4234721af11b2ac971e9362c941ac020abd978a427148546bf518b15bac979c5ddbe0e8f240e3485ad34c8c8f965c8bc4685fc58f95927b0059915d227aa3", 0x9a}], 0x1, &(0x7f00000020c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r21}}}, @rights={{0x28, 0x1, 0x1, [r10, r24, 0xffffffffffffffff, r27, r18, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, r24]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r22, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r25]}}, @rights={{0x1c, 0x1, 0x1, [r17, r10, r23]}}], 0xb8, 0x2000c080}}, {{&(0x7f0000002180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002480)=[{&(0x7f0000002200)="dd9196822ddbfe9b41b8bc8fe2cc70ec65a153a8152a8e5d89592a44faaaca", 0x1f}, {&(0x7f0000002240)="14e69d2c8529c1c693792ed5b7b006509b032cfb1a855d8043bc90cad1786d5c760a6dfb3c4f9110b27db50d1ae502f0bab687ec5ef707b904fc610f919b7433d18533ffe0a37827f4b0690da3d9dd8286018965601a80671aca6dca633418c58f572de8b8ed374f03a96ace1ad40cf7647e784259121458df88f2b54cbafdcb55fd51449305d6af946015344031f5517fc7dbf26fa6dc2f9cd5dc388bd469d14f0c30ab2f39e64a17731b2532af5a9ec137fec0a040fb6bdfd4528a3c012a9d6f2a9efb5d44aba6b901eeffe25c476a3b57d4c3d55fda16a570d6b12ce218f535e416f39edcf18d95510d", 0xeb}, {&(0x7f0000002340)="ae5fb4ec9756eeb79b7346cc31b079652016b6410951e954c4a09ab45a6e3bcb5ba6f2e1084eefdba01e59daa6b033b1ed4bf38b4afa170984b29ce62b69d6091b44", 0x42}, {&(0x7f00000023c0)="cd2c82208f95d93d6988716f734c4deef052dfe880d0b7ca55dc493339028f6bf092e6f5e1c58d8251b4506b68e2e75f75f18df64b2203e50a035540a59a874f4c085e179d3d3ed44b128dd152da7243596f5a7a4cd95835ec2086ce962005cca2bd9bc5bd8770d497670bd396c12aa6b9550416f5bec636d93bb0ddcb77550a7a60d3a6b8cfc95a1aceb840b943c31203c13e9cb435b30dbb1814bdd9ea65e12415453945f0891201dac257c36de536ac03a5416f9f2df0dbb0a1dfc0f995", 0xbf}], 0x4, &(0x7f0000002500)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r30}}}, @cred={{0x1c, 0x1, 0x2, {r19, r6, r3}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r12, r24, r9, 0xffffffffffffffff]}}], 0xf8, 0x8841}}, {{&(0x7f0000002600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002680)="07c3206fceb1f85209d9415d88a58b25dda0f8155d68b59795ac2b2c9cacbc3832caa48078d6ba32bdce1d2a93f6b34881aa97f2d0ab1919035f4deb032c9d465b043e553b8abfdb1d29965159da66db9906e03564fe21954237073cde364f5acc0af42829b5de04b690c3afcae560c13139d883785991ed60ad13ec64d808acd41d1875b0efaf070bb5dd4473cbe10b1fe1dead4eef853b955d7c3dbd95ab41368586463af925382e894bb5b44c9db6e8c20fd702be8046943a1af01828317a8e3b5511feccb83ea203034c75f7cb355061", 0xd2}], 0x1, &(0x7f0000002800)=[@cred={{0x1c, 0x1, 0x2, {0x0, r20}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r15, r14]}}, @cred={{0x1c, 0x1, 0x2, {r5, r29, r2}}}, @cred={{0x1c, 0x1, 0x2, {r19, r29, r30}}}], 0xa8, 0x800}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f00000028c0)="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", 0x1000}, {&(0x7f00000038c0)="f10ae132ea74cc77f3e2ab3a789e9cd9677a39cec2058f3fe84d694ba18638677ac88acb2c46343b3143c8cb77a4992e3331bf903f685ef2549ef714932a0e497bc42cb22b6aaef500fdc8968e56483b2976b9d22ab3db42ed8f26e3dfd5e8c7d22610f9d78c5d4ec9f5383349b6f5e834d51c38f724d6861e5dcee40fb0c0bd34b41411e591a8e2f651636d4a70cb35d2838dcbc64a8569f1bc", 0x9a}, {&(0x7f0000003980)="8996999f4375934801ca0285bf139e45e8a836871f89769bece57b523c662196663b5fed850e47740737fcd92e19805ced29f4af02df2a8bddf631afbab462f408aa153484cd9c6acc0b49c6d3de461273c83cf0ee4a7b688e933723636a55431ae9ce063d2121c93198b6294a48868aac7e8a2cebbebf2825bb56e9789fb2d1ef901213d2095e02edd9e60bfcb620313a7f8325a23e135e85b53cc83fac231a66937319329c", 0xa6}, {&(0x7f0000003a40)="5e944be6a4d02d679211043ae58adacc8690b3f2ebd13080a24d298689fadb0232c210db463e02a1cfabbe991be9b3ed7521410e28e4d4faa17e88482b875a3bdfcd9021a89aa3636cb0d37fd99e13fc1fde5334b88f77c23dbea3e82d23f74ae2e775b04a1fb8", 0x67}, {&(0x7f0000003ac0)="12", 0x1}], 0x5, &(0x7f0000005d80)=[@cred={{0x1c, 0x1, 0x2, {r28, 0x0, r32}}}, @cred={{0x1c, 0x1, 0x2, {r19, r33, r36}}}], 0x40, 0x800}}], 0x5, 0x24004804) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) 04:38:06 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:06 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) 04:38:06 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:38:15 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:38:15 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) r1 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmctl$IPC_RMID(0x0, 0x0) shmdt(r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmdt(r0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:38:15 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6d1a85ba39ac30518a348d866fa76470714f396c3d7072656665723a302c0027a73d28c0aa55f7a6a52b1909ea3274af8c611fc66481aa195a2314add764c2a1cd48328106e337b0b5ae848151b794bdc1ccfd6e8337e0adcec63f1c9032c7da0b92632562f9ef29bda0f7c2d7d2d48394b9e116923bb75cc697736f2de39eafc87b5515c25db109d4aaa316ada1111a4b9586f3be93ec1b6ee2e6ed77d3ce9f3826c50a0400000000000000a54ccc7538d191ba"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="296c280349d57af053064a69321ea6c18cf9ede400cee946e755995a6d423aade36b7c734ff8eae16396d45e6616b84fdbb9d1113ac1553e95aebdcdaa2b46730dac1be7e2cd5fb0d240be643375e882aa477d03008a78e7ed53b68f3cce78e87aa3fd635644bd79f9787aa012ae949d510c6500eb9f28f2e9935dd8ba11f327445c65bee83748f991d8cf1fd05b6093da3ea0e1f46c74c8ed5367aa7c8fc3ac61806008ace35ce21d88677861fb7df617f216684c1ac4b08f13c27c6ca27cbe65a07d570d64b2caeec8a20471a4ddae1a68f800cc70c91b8174c9674a9ef0e0a179064d97eb530fbdce20cb64fc210f", 0xf0, 0x5}, {&(0x7f0000000280)="ebe08128500b964c1d5c75d17cb2", 0xe, 0xae5a}, {&(0x7f00000002c0)="f15822d39a789634dbd78f5dd3e7132272e21be19a04fe87d4f3461a72ed72b1c0fa59b1fe0f4fb2be9598e49120e1cc40370d3adb8bcbb00bbf76eb10d516af682e7e0591a20f1e188fbd0b16df6bc8e9eed3b5ab73fac0f8e14a198be98f03b16f4eb7dd99f17feefe4af21b5bc85cdb8fd759f556f14500c642ef286ed9405bececd1d975f3c9dc68bd7523b6b09c2848cbeac0e9a3669e9d8a1363cc465b802275", 0xa3, 0xfb7}], 0x2000, &(0x7f0000000540)={[{}, {'tmpfs\x00'}, {'mpol'}, {'@'}, {'prefer'}, {}], [{@euid_gt={'euid>', r1}}, {@smackfsroot}, {@context={'context', 0x3d, 'sysadm_u'}}]}) 04:38:15 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:38:15 executing program 5: timer_getoverrun(0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:38:15 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0xb000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) shmdt(r2) 04:38:15 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0xd000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:15 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, 0x0) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 1755.678499] tmpfs: Unknown parameter 'm…º9¬0QŠ4†o§dpqO9l' 04:38:15 executing program 5: mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1755.710319] tmpfs: Unknown parameter 'm…º9¬0QŠ4†o§dpqO9l' 04:38:15 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x33]}}}}], [{@obj_user={'obj_user', 0x3d, 'mpol'}}]}) accept$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=0x6e) mknodat$loop(r0, &(0x7f0000000100)='./file0\x00', 0xc000, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:38:15 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 1755.816407] tmpfs: Bad value for 'mpol' [ 1755.822514] tmpfs: Bad value for 'mpol' 04:38:15 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000003000/0x2000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:15 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmdt(0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) shmdt(r2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:15 executing program 0: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x38]}}}}], [{@uid_eq={'uid', 0x3d, r0}}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0x1e}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_appraise}]}) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:38:15 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, 0x0) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:38:15 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f6c3d70726566659a96ca1700"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000066694878010ac55814abbbbe541dcb396d1f5c95bae30e644423ae63415eff00000000"]) statx(r1, &(0x7f0000000140)='./file0\x00', 0x2000, 0x400, &(0x7f0000000280)) 04:38:15 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1755.949986] tmpfs: Bad value for 'mpol' [ 1755.959376] tmpfs: Bad value for 'mpol' 04:38:15 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x802f42cfe12d4e8e) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r1) shmdt(r1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:38:15 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/106) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:15 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:38:15 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) r3 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1756.044663] mmap: syz-executor.3 (18927) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 04:38:24 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, 0x0) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:38:24 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) shmdt(r2) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:38:24 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) 04:38:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x1, 0x2, 0x4, 0xffff, 0x4, [{0x100000, 0xd8, 0x3, '\x00', 0x88a}, {0xffffffff00000001, 0x4, 0xfffffffffffffffd, '\x00', 0x2100}, {0x8e, 0x5, 0x800}, {0xc9, 0x3, 0x8, '\x00', 0x800}]}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6d706f6c3d7072af6665723a302c00f7a4769e9dae4f8a0b752ec4b28c475a6ed21206d528faefd1a9e85bb7c2d05ab803c442abb424fd9693866dce2b45c61f7d2368f0899a4cfba1ec6ab7bd2f427833b49ef71a56f89686bc5dfbe12f6bc8a769b2ba17d547fca1f6fb00405ca785deb5384e7583213552a9202f02276ad94018707777e85cc275bac2aa3bce919b331cfab502a0a85e31c4af618e521af5da0a1af2d63783351622f9e84aa6209adbbdb7406bb198b1ea8c988c516d21318f231a676e87fac56fdf1b91c37f6c63f17b8959451c6df1ded34da51cd3cd4578dba4c850ef945f94bbd0d53f5236bdcbe9a97c82b5fc5859ee861680"]) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:38:24 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x200, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) 04:38:24 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:38:24 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x7000) shmdt(r1) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) syz_io_uring_setup(0x3677, &(0x7f0000000000)={0x0, 0x60cf, 0x20, 0x2, 0x1c4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(0x0, r2, &(0x7f0000001540)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r3, 0x0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/254, 0xfe}, {&(0x7f0000001200)=""/244, 0xf4}, {&(0x7f0000001300)=""/5, 0x5}, {&(0x7f0000001340)=""/125, 0x7d}], 0x5, &(0x7f0000001440)=""/154, 0x9a}, 0x0, 0x40000000, 0x1, {0x2}}, 0x1) 04:38:24 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="d7915bac06757cc71ab4b7674fb38d06ad9246e2ed5d95711cd9105d9290ad20747626d4a593fa2115964b6d8d99c35ef8d48c6d774913d1943e095f416bffc861ac20a849137ba7f45b12"]) getxattr(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', &(0x7f0000000200)=@random={'trusted.', '\x00\x11\xbd\xbd0}(TC$v\xb2S\x95\xbd\xf2I\xf0\xdaj\x00\xe6k\xf2?_\xe5\x1c\xad\x92n\xa4\xffg\xa0/\x94y\x8ca\xc0j\xd7T\x0fU~\x01\x91\x93~B\xeb\xaf27?\xb3\xb4\x836\xa11\xe1\xe2\xa0\xb4\xe8\xc5\xa1PG\xf6zm\xf3x\xaf\xe2\x0f0\x8a\xe4S\xd5\x86\xa0\xe46#\x16\x16\x84\x8e(#N\x7f\xac#E\"\xe9\xd8\xf1\x1e|X\xb3\xafu\x96a\x00'/125}, &(0x7f0000001500)=""/4096, 0x1000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000002500)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f00000002c0)='./file1\x00', 0x2, 0x2, &(0x7f0000000380)=[{&(0x7f0000000500)="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", 0x1000, 0x9}, {&(0x7f0000000300)="06870f3ca7252df05e8f31362187213ddb166693b4a1005b96474e38f85d778895228b54aaf1191ef1e9af595fc44de357dd68d426f436f39ca74b59aa92e7ec2d8fcf6f7eb7944188725e4b4c5de79e70834a99ac817a4bfa9eb3a42382d18251d05a34", 0x64, 0x3}], 0x188000, &(0x7f00000003c0)={[{'!'}], [{@audit}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$null(r1, &(0x7f0000000080)='./file0\x00', 0x80, 0x103) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1764.629288] tmpfs: Bad value for 'mpol' [ 1764.633832] tmpfs: Bad value for 'mpol' 04:38:24 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:24 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c2d7072656665723a0000000000671f103b1c00"/43]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1764.679413] tmpfs: Unknown parameter 'ב[¬u|Ç´·gO³­’Fâí]•qÙ]’­ tv&Ô¥“ú!–Km™Ã^øÔŒmwIÑ”> _AkÿÈa¬ ¨I{§ô[' 04:38:24 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18}, './file0\x00'}) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) [ 1764.698366] tmpfs: Unknown parameter 'ב[¬u|Ç´·gO³­’Fâí]•qÙ]’­ tv&Ô¥“ú!–Km™Ã^øÔŒmwIÑ”> _AkÿÈa¬ ¨I{§ô[' [ 1764.714459] tmpfs: Unknown parameter 'mpol-prefer:' [ 1764.719988] tmpfs: Unknown parameter 'mpol-prefer:' 04:38:24 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7191fd7a8d2513e9f83f68b4f76d706f823d7072656665723a300500000000"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000100)='./file0/file0\x00', 0x400, 0x0) 04:38:24 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) [ 1764.802389] tmpfs: Unknown parameter 'q‘ýz%éø?h´÷mpo‚' [ 1764.805073] tmpfs: Unknown parameter 'q‘ýz%éø?h´÷mpo‚' 04:38:34 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x7800) mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1000003) madvise(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x9) 04:38:34 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:38:34 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x1000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x1000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x6000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/239) 04:38:34 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil, 0x5000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xa) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) 04:38:34 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:38:34 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmdt(r1) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:34 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:38:34 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x5, 0x3, 0xd, 0x8, 0x85, "d3fa7f6c239414e0538efca67ea3233d02afa857866cb7de811ec9e525e4c7dbf6872e4e1201fc69f7f4f05f2855bcbcd0bff42c1bfae5f43e502683accb05dcad37cbe33689d39aaee0b8c7c8329f5f63c061350de9e333fddbb0f603a074cba23d9b9beeff3b0b34c0f594641f7ec23f60389c36ce658d36e08814e2c5481c75e86255d0"}, 0x8e, 0x1) 04:38:34 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x2, "1e2abe5b00"}, 0x6, 0x3) 04:38:34 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:38:34 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:34 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:34 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x40, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x100, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:38:34 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) truncate(&(0x7f00000000c0)='./file0\x00', 0xffffffff) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005580)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/129, 0x81}, {&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000002c0)=""/36, 0x24}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/107, 0x6b}], 0x5}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000000540)=[{&(0x7f00000004c0)=""/113, 0x71}], 0x1, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/107, 0x6b}, {&(0x7f0000000640)=""/184, 0xb8}, {&(0x7f0000000700)=""/105, 0x69}, {&(0x7f0000000780)=""/31, 0x1f}, {&(0x7f00000007c0)=""/173, 0xad}], 0x5, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000a00)=""/104, 0x68}], 0x1}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000ac0)=""/223, 0xdf}, {&(0x7f0000000bc0)=""/142, 0x8e}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/42, 0x2a}, {&(0x7f0000001cc0)=""/218, 0xda}, {&(0x7f0000001dc0)=""/237, 0xed}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x7, &(0x7f0000002f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000003040)=@abs, 0x6e, &(0x7f0000005500)=[{&(0x7f00000030c0)=""/197, 0xc5}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/4096, 0x1000}, {&(0x7f00000051c0)=""/223, 0xdf}, {&(0x7f00000052c0)=""/60, 0x3c}, {&(0x7f0000005300)=""/104, 0x68}, {&(0x7f0000005380)=""/251, 0xfb}, {&(0x7f0000005480)=""/108, 0x6c}], 0x8}}], 0x6, 0x0, &(0x7f0000005700)) 04:38:35 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = shmget(0x0, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/253) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/120) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd) 04:38:35 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:38:35 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d7072656665723a72dc45af9768062684302c00"]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 1775.236897] tmpfs: Bad value for 'mpol' [ 1775.240658] tmpfs: Bad value for 'mpol' 04:38:45 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x6, 0x4, &(0x7f0000000500)=[{&(0x7f0000000240)="7a02a8ce8036758aa947b01c3bd47cf0710c89bb549078351136591a708936de0b54b10c65e0b893387ae34b2ee651e02a12b3cc89b5e53e38fb9e799cee111dbdcdbfb5ee037d07777d6197f5c0b48d8b7cc4bfceb63718f3b9072581e3d2fa2f370534d0462f6e4fdb86ce5bd003d6de87e69f4deaa948feedd5b8c4dcb1760717b6e83655f5b8e6bad5c9083a040d1175", 0x92, 0x8}, {&(0x7f0000000300)="06068782121336486dbc502b074fbf5d95bd690141db68ee81e0612579894d356f2d5b76681178873b014f4915ee3213d102bd56a70bf05ea97a1533bef5d9d83fd5bd18cb75111822393017d2b1ed86df06b8085e34c64bed9e5d8893235c7f7aa3992cae8e3edc5188c8b418c62890ec5b1898e514e0fe7f86523055aca1ac4a0d", 0x82, 0x6}, {&(0x7f00000003c0)="4bf979cbfa56bc433413f50b3f0cbfe1a28f53ea8432439cb94b5665ed96afaa8b0d13b447f03be5ab02f694a65cb8d818f96bfd0c4119df4f8033a9f57ed0021427b143bcb79c3e154ca7a00e91552f72e9615557e34c67c90b4d783e077c4fee93aaef7b7598cda4b16444b8d6af85f9fded72db8e9e9b3faa39d951e87d3760d8e138c50c45be7b8eacbc1518f523d8fcf8891a8220fe012fdda6ea42c76c91eff407e5c281edd873c59e3731d2f7e8c122", 0xb3, 0x2}, {&(0x7f0000000480)="d8b45f205997e5666bda6cd5eb2ace4c2903bb383c816113f007c0c9f35b9fbf2212016949c673a7638b2fe50860a5110df191a6bd5a194de68cf84e83cd0b0f8086e610fb70ec7109a2", 0x4a, 0x7}], 0x801040, &(0x7f0000000580)={[{@huge_within_size}, {@huge_always}], [{@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '-.]'}}, {@euid_lt={'euid<', r1}}]}) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@random={'osx.', 'prefer'}, &(0x7f0000000180)='\x00', 0x1, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:38:45 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="5882f8bc00000080ffffffff4f0000000000000008d750778e73def5b05d01502c8eb90a62105be298", @ANYBLOB="7fca3f5c8d31f484f30faec9f10246eb746c1a818d7aadf49c0a036ac981cf45723562457209cbafc01309d601671dbaa08e03c6b3bb915a937962dcbf45610e3631b549b55038b96b6d83f7e0ad7eec478f111cafec5a43cd"]) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/109, 0x6d) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:crack_db_t:s0\x00', 0x20, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4000, 0x0) 04:38:45 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x7000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:45 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:38:45 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x3000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r1) shmdt(r1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x64) 04:38:45 executing program 4: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 04:38:45 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:38:45 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r2}, './cgroup/cgroup.procs\x00'}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x7) [ 1785.418898] tmpfs: Unknown parameter 'X‚ø¼' [ 1785.459557] tmpfs: Unknown parameter 'X‚ø¼' 04:38:45 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x40010, r1, 0xd96f3000) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:38:45 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:38:45 executing program 4: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4334}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @window={0x3, 0x8001, 0x2}, @mss={0x2, 0x9}, @window={0x3, 0xde, 0x6}, @sack_perm, @window={0x3, 0x84, 0x1000}], 0x6) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:38:45 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmget(0x3, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:45 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x7000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r3 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:45 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000004c0)={0xa, 0x4e23, 0x7, @local, 0x6519}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000500)="d0dbe2c28797d8cf08df1bbf846fb93dd79fe00df8caeacb48c9cb96cc3d3862ad64fe4ff15fc020b04365d427265753a69dac0a2138252be64717a3f14af8f42fd84e92676e41af01d730f5ed4bc3f009251c2ce9d362f9e36ea9f71fff7a34ede1110de75b790f8d7351bfff0122023ad1d89131da6656a817f13c611df2a35a50a3590a55e7bcfb46eca4b1194ac1158bc318bb4598bd46ea2ca83a9a87f587b11f9ec6bd2f7fcecbc77d78deab7dbcdeb65e59ad2d5172ffebda17e8fbf4beb2a30ea73a47e3682a4b6c8756f790507dba", 0xd3}, {&(0x7f0000000600)="279624574b7b1762510fdd77adc03ab06e2e8018e775827a5574fda811feb9d136c60120afc9109fe31f987926cd4d6938361363889e46d01ba6bcea5c6701456f6301579e495125e3d72856", 0x4c}], 0x2, &(0x7f00000006c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x6c, 0x2, 0x0, 0x9, 0x0, [@private0]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xf7}}, @rthdr={{0x88, 0x29, 0x39, {0x0, 0xe, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0xe}, @empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @mcast1]}}}], 0xc8}, 0x100) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1001421, &(0x7f0000000300)={'trans=virtio,', {[{@version_u}], [{@subj_user={'subj_user', 0x3d, '%[\','}}, {@uid_eq={'uid', 0x3d, r1}}]}}) chdir(&(0x7f0000000480)='./file0\x00') mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800000, &(0x7f0000000400)={[{@noprefix}, {}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@context={'context', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 04:38:45 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:38:45 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) 04:38:45 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:38:58 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) lseek(r2, 0x0, 0x1) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x0) 04:38:58 executing program 0: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@huge_never}], [{@uid_lt={'uid<', r0}}, {@measure}]}) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:38:58 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x70) getdents(r0, &(0x7f0000000100)=""/171, 0xab) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) getdents(r1, &(0x7f00000001c0)=""/143, 0x8f) 04:38:58 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/237, 0xed, 0x1, &(0x7f0000000100)=""/177, 0xb1}, &(0x7f0000000200)=0x40) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:38:58 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmctl$IPC_RMID(r0, 0x0) 04:38:58 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:38:58 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[], [{@measure}]}) r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchmodat(r0, &(0x7f00000001c0)='./file0\x00', 0x20) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2a48083, 0x0) 04:38:58 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) [ 1798.294050] tmpfs: Unknown parameter 'measure' [ 1798.301231] tmpfs: Unknown parameter 'measure' 04:38:58 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:58 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:38:58 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:38:58 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmctl$IPC_RMID(r0, 0x0) 04:38:58 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:58 executing program 2: r0 = shmget(0x1, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x17) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x4, 0x2acd, 0x1) 04:38:58 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmget(0x3, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r1, 0xc) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r4 = shmget$private(0x0, 0x5000, 0x200, &(0x7f0000ffb000/0x5000)=nil) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/239) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(r0, 0xc) r5 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:58 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x54000002, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:38:58 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) r3 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:09 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) r3 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:09 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:09 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:09 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x0) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmget(0x3, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) 04:39:09 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:09 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/215) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:39:09 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:09 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x0, r1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, r1) r2 = shmget(0x2, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x0) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:09 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x2000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:09 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:09 executing program 2: ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x5, 0x2, 0x8fc5, 0x1, 0x10, "cf31b6d3e1bad53d"}) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) 04:39:09 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:09 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/60) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) r2 = shmget$private(0x0, 0x2000, 0x1023, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) 04:39:09 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:09 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r2, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, 0x0, 0x6}) r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r6, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r7 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = fcntl$getown(0xffffffffffffffff, 0x9) r9 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r8, r7, r7, r9, r7], 0x6}, 0x58) r10 = gettid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x0, r2, r5, r6, 0x22, 0x7fff}, 0x20, 0xca, 0x1, 0x3, r9, r10, 0xfff9}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:09 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) r3 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:09 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:09 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:18 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000400)={&(0x7f00000004c0), 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x14, 0x6, 0x1, 0x201}, 0x14}}, 0x0) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:18 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:18 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:18 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:18 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:18 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) r3 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x0) 04:39:18 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:39:18 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 04:39:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:19 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:19 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 04:39:19 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) shmat(r2, &(0x7f0000fff000/0x1000)=nil, 0x3000) mlock2(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:19 executing program 4: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:39:19 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:19 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:39:19 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r1 = shmget(0x2, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil) r2 = shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/129) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xd) shmdt(r2) 04:39:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:19 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x7000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:19 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:19 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:29 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:29 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:29 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:29 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) r1 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x5000) 04:39:29 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:29 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 04:39:29 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:39:29 executing program 2: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = fork() r2 = fork() r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x13c, r0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14c, r0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x80da069}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1f}, {0x8, 0x15, 0x2f2a}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1000000}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x8}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:29 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:39:29 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget(0x3, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x7000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) 04:39:29 executing program 3: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/235) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r3 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r3, 0x0) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x3f, &(0x7f0000ffe000/0x2000)=nil, 0x7) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x14) 04:39:29 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:29 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) shmget(0x2, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) 04:39:29 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:29 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:39:29 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:41 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x20, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000a, 0xffffffffffffffff) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:41 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:41 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:39:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:41 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:41 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:41 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:39:41 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmget(0x2, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/228) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:41 executing program 2: shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) r0 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x3, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x3000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:41 executing program 6: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x48011, 0xffffffffffffffff, 0x10000) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:41 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:39:53 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = shmget(0x1, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x7000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x3000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) 04:39:53 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:39:53 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:39:53 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:53 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) r0 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/251) 04:39:53 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:53 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:53 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/4096) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) r3 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x7000) shmdt(r3) 04:39:53 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:39:53 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x12) 04:39:53 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:39:53 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x100, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:04 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) munmap(&(0x7f0000fed000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r0 = shmget(0x0, 0x12000, 0x4, &(0x7f0000feb000/0x12000)=nil) mlock(&(0x7f0000feb000/0xa000)=nil, 0xa000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:04 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:40:04 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:04 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) r2 = shmget$private(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:04 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) shmdt(r1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:40:04 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:04 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:40:04 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, r1) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x11) 04:40:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:40:04 executing program 2: accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:04 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget(0x2, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x1000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget(0x3, 0x3000, 0xcf365319343844c3, &(0x7f0000ffd000/0x3000)=nil) r3 = shmget(0x1, 0x4000, 0x4, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_LOCK(r2, 0xb) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:04 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:40:04 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) r2 = shmget(0x1, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x7000) 04:40:04 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:40:04 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = shmget(0x1, 0x7000, 0x40, &(0x7f0000ff9000/0x7000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0xc, &(0x7f0000ffd000/0x3000)=nil, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:17 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:40:17 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r1, 0xc) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r2 = shmget(0x0, 0x3000, 0x85, &(0x7f0000ffd000/0x3000)=nil) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/225) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:40:17 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) r2 = shmget(0x2, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x6000) 04:40:17 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x64) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:17 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x3000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:17 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0x0, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:17 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:40:17 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 04:40:17 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:17 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:40:17 executing program 2: r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmdt(r0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:17 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:40:17 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:40:17 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) shmdt(r2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:17 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ff9000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:17 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:29 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:29 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:40:29 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x4496, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x27c, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x0, 0x12345}, 0xfc) 04:40:29 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:40:29 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:29 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:40:29 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) 04:40:29 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0x0, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:40:29 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:40:29 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d305655f000000000000000001000000000000000b0000000001000008000000d2", 0x61, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f610601", 0x1d, 0x4e3}], 0x0, &(0x7f0000014100)) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:29 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:40:29 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 04:40:29 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:40 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0x0, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:40 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:40:40 executing program 2: r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) shmdt(r0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x0, r1) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, r2) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, r1) munmap(&(0x7f0000873000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000871000/0x2000)=nil, 0x2000, 0x2) 04:40:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:40:40 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:40:40 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x5000) 04:40:40 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:40 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:40:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:40:40 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:40 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:40:40 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r2, &(0x7f0000ffb000/0x1000)=nil, 0x1000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:40 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:40:40 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x12) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:40 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:40:40 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000fff000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x9000) shmat(r1, &(0x7f0000ff5000/0xb000)=nil, 0x5000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:40 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x0, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:40:51 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x0, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:51 executing program 3: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r1 = shmget(0x1, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r0, &(0x7f0000ffa000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:51 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:40:51 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:40:51 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000e, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x410400, 0x0) r3 = dup3(r2, r2, 0x80000) syz_io_uring_setup(0x1cea, &(0x7f0000000040)={0x0, 0xa6d5, 0x10, 0x1, 0x39e, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:51 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x7000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:40:51 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:40:51 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x200) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:40:51 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:40:51 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:40:51 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) 04:40:51 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmctl$SHM_UNLOCK(r1, 0xc) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:51 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:40:51 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:40:51 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) r1 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/178) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:41:03 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 04:41:03 executing program 0: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:03 executing program 6: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)={0x448, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x400, 0x42}}}}, [@NL80211_ATTR_FRAME={0x1ed, 0x33, @probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_b, @device_a, @initial, {0xb, 0x2}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x78}, @void, @void, [{0xdd, 0x88, "0c9f37e1ded7da442249181afd4248a7a456072b07c8dac68b30d0bebf32f322013cc0f93e5cf98e2602b7e85e9512b5ba09c599033e5f62f1bd7317a5049d5c3e3e310eef567575d376b3a4e8f029bc9bdc03479f7b569e5c81e7ecb5ee482a04dd05ff389292805d706a6e587ce39f9fc96b6d054ea8f0d9dc6434c4e2c6453672f6b7cf120357"}, {0xdd, 0xed, "91ea7ad50e017b29beef11d58f9d57bbc19a4018a66d710102e987a08f002d63940e49c0c9b7376e526d9e0111c3cfa622c578529356b77ce1a6545f604aab27402630a1621799137d35b7e44a045b3472503fc269e25e9c0aa17c38a0b06fa5fc68716a91cf2381a7cc0229466cc69217a46698e1060e77c021bee5c521bea1a0d39c2006afd917f88f4e513024c33676e1b93732e248446574569e6bc6e7086ca6214d990ad1cee32650d39381b7026e25ba49c96cd53eee424a660e1f7240c154e4b13d14976cb97e371ee366bb4878c6f5bda804e7f72ae8872fc92bb00ec38a029a38ede341077c1ca9fa"}, {0xdd, 0x4b, "2fc1d982fd14eab59912c4ee351b03a3a4505d3f89e73253d0a1dad45cdc87edc642b9afa372de5c959103d0b74179b0722bf20f7b7298c33a12c148a5f7122c9e2e07ff04b35784740b9b"}]}}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={@wo_ht={{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @random="3ec2fbe38e41", {0x2, 0xc4f}}, 0x3c, @val={0x8c, 0x18, {0xd95, "69a070978907", @long="d0129f6fc2a2d44ac4deea0e7472eaa1"}}}}, @NL80211_ATTR_FRAME={0x1fe, 0x33, @reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_b, @random="ec529b9dfb43", {0x0, 0x3}}, @ver_80211n={0x0, 0x2, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x3000, 0x66, @random, @void, @void, [{0xdd, 0x2b, "7dc718414227164fa7d2902cd6b66c754b7f7626fc10e7a12c3828666661731c14587898fccca441a61662"}, {0xdd, 0x8c, "12a79ecd1fc48ac2b38bd1a3536f28edca4ecc0c6b16e0ef5262a12075402c7522f663a1592220eced7e6f634861d9031389fcb2376e4c8d168fd9b79787ea3a0cea7aa6a7e3f30eaf2ffa389196d72d28fdf728146aadf9df41247c3ae096f34437615ef268432c5734a63ae282017d674b73992704048590acc6e2a207e59eca1de33e09b9440c3c993b6c"}, {0xdd, 0x95, "0235dd4971ae724004da973cd83740672cd995b297f4440899e288a00463f4b7fff2417faa43708754912e14a2036715ef42172f6e449003d137082c88fe13f0800e9cfb1245c7c6033d80465133516f2d592bcd1533d1bf7945f9b6631b08f3cb7314793376a10e8340b1cddd47ecf068fcac09f89a801418769f2e887e92415e9c0fbb8983b8d64fb0e8a7d447f7c0852d5335ff"}, {0xdd, 0x55, "bac3af3f280e3b83e525c56942fdeeb323bca5c0e914bb8dcb138efc957671810ed6bc87ebe435b5f239109ed12b1bee8f05761d369d9b9be0c3c1725538f1bab9ca8d50d4be352c7e556966c68fcc7f33fe63c147"}, {0xdd, 0x19, "e40ca980dffc2d7a035e1ae0b8be94530662395674c5796762"}, {0xdd, 0x12, "af7f7ada60a2a674d37954f222deabaadb47"}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x4000804}, 0x40004) r2 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x1000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x0) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x3000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9) 04:41:03 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000002100)=[{&(0x7f0000000f40)="198e9df03cc0d628378d6a7ca2105e3e9e72cd1dbecfc64489fbef4e3dea1ea566a0d781a4c6d4e709080a42362934892cc81723d29efbeeeeb324c62762941c9d858c33bd91a82d51adbbd3793fc084f9e21321b4a7583eb0beec2723051b3cf5f44b22c66a4e9dca7f293ecacc78c9df424915563315051e7aeca5bf5b01ca8acb9ebb91e5150aaa579b675b9f14cd20d158f89c286c3ec505ac6ae346e7d68f59f6b25c9b72", 0xa7}, {&(0x7f0000001100)="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", 0x6fb}], 0x2) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000002e2f6377726f75702f6167726f75702e70726f63730097fcc7ba8ec0c691f96a8cc88668eccbeadce229e955bff64b9cdc6a4d0d941a29b4aaf4cdaea96dbd5c8a9685681c961f8e2016f9c63922ac8e905081a0060166ba3a5cb18c9b491d4d94af60cd80a5a070aa5d0372164c94a71df733f0c3ab4f475c11c62f89e69e7d936d206945b98af379f501e5642b0c5db0adbcfcc9c56ca717496a82ac21bc0695fcabda1a3001d3221fde931e59f35f379c73c8e183bc231ddc823da20d1496231666e5ed5525122ee2628458ff5466b8ebe6979f5815b8bb517c4ed3"]) syz_io_uring_setup(0x6a55, &(0x7f0000000240)={0x0, 0xb325, 0x2, 0x0, 0x22c, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:41:03 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:41:03 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r1, 0x10000000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:03 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) shmdt(r1) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x8001, &(0x7f0000000000)=0x6, 0x2, 0x4) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:41:03 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x0, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:41:03 executing program 0: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:03 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r0, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r0, 0x10000000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:03 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:03 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000e, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x410400, 0x0) r3 = dup3(r2, r2, 0x80000) syz_io_uring_setup(0x1cea, &(0x7f0000000040)={0x0, 0xa6d5, 0x10, 0x1, 0x39e, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:03 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) msync(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:03 executing program 6: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget(0x0, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000001, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:03 executing program 0: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:03 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000914000/0x1000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000e39000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x14) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) r1 = shmat(0xffffffffffffffff, &(0x7f0000800000/0x800000)=nil, 0x0) shmdt(r1) 04:41:03 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9) 04:41:03 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:41:03 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r0, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r0, 0x10000000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:13 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/84) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:41:13 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x0, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:41:13 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x4496, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x27c, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x0, 0x12345}, 0xfc) 04:41:13 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r0, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800005, 0x50, r0, 0x10000000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:13 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmget$private(0x0, 0x1000, 0x35c, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:13 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmget(0x0, 0x1000, 0x80, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x3000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0xc000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:13 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:13 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:41:13 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r1, @ANYBLOB="00af1900000000002e2f6367726f75702f63873c6f75702e70726ff0b200"]) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:13 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ff7000/0x9000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) r2 = shmget(0x0, 0xa000, 0x1510, &(0x7f0000ff6000/0xa000)=nil) shmat(r2, &(0x7f0000ff7000/0x2000)=nil, 0x4000) 04:41:13 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:41:25 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:25 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x0, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:41:25 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget(0x1, 0x11000, 0x1, &(0x7f0000fef000/0x11000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r3 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x0, r3) pkey_mprotect(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x2000005, r3) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000fef000/0x3000)=nil, 0x2000) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/88) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) r5 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ff6000/0x3000)=nil, 0x0) 04:41:25 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:25 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:25 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shmctl$IPC_RMID(r0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) 04:41:25 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:25 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x1000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r0) shmdt(r0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/76) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) 04:41:25 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:25 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = shmget(0x1, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x7000) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x3000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) 04:41:25 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:25 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:25 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x10) 04:41:25 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) shmdt(r0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) r1 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x3000) 04:41:25 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:25 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:41:25 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:35 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x10) 04:41:35 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x0, 0x3, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:41:35 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x2000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:35 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:35 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:35 executing program 2: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x2000) shmdt(r0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 04:41:35 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) r3 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x0) 04:41:35 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:35 executing program 2: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = shmget(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmdt(r1) 04:41:35 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) r3 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x0) 04:41:35 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x3000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:35 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:35 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:35 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x10) 04:41:36 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000fee000/0x12000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x3000) 04:41:46 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:46 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:46 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:46 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x0, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:41:46 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:46 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) r3 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x0) 04:41:46 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) 04:41:46 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:46 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) shmget(0x1, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 04:41:46 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x2000, 0x1841, &(0x7f0000ffd000/0x2000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:46 executing program 1: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:46 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:46 executing program 2: ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000000)={{}, "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"}) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmdt(r1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:46 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmget(0x2, 0x3000, 0x884, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:46 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x0, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:41:46 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:46 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) r1 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r2, r1, r1, r3, r1], 0x6}, 0x58) r4 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = fcntl$getown(0xffffffffffffffff, 0x9) r6 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r5, r4, r4, r6, r4], 0x6}, 0x58) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/187, 0xbb}], 0x1, 0x5, 0x3, 0x26) r8 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f683d707207430571526cb500"]) mknodat$loop(r8, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:41:46 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r1 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x3, 0x3, &(0x7f0000000300)=[{&(0x7f0000000180)="0e3a4c947d816a46d5de3a53de39e8fd57b9827e96f7523edccfcef6328615f20e3fca47", 0x24, 0xffff}, {&(0x7f00000001c0)="52f0483ec8721fba7e3c11d847158ba89941e9563149182d2a4fcef503d5f39cd5b1475208cb94464ef864e34ef2d6c52f6c9d62a2918cfc5a2fff3de956bfd10e7a854bb77eda4b23202fee68f6aabc4f8652ad", 0x54, 0x5}, {&(0x7f0000000240)="4a3c5c79e0ab52f0e9a415fa98593420480172f9771f6927408b89acb34e42f91965226d661834f71ae5850f8fce1b81f313034e9c2920e3ad8f274b9760e3b979b392ddcc3c180557a2de4ad24ccc3b6af4c5ec7ad44ea64ddfa7fcfd19c46d28b3824175ebcf3cc27887b01fe8e95289584b2063178008fb6e0628ff79d3586bcb6288f4781f3eb5", 0x89, 0x1f}], 0x108000, &(0x7f0000000380)={[{'!:^}/%:)%-@&{--:,%%,'}, {'mpol'}, {'@'}, {'mpol'}], [{@seclabel}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@fsname={'fsname', 0x3d, ',.+\\@-'}}, {@obj_type={'obj_type', 0x3d, 'mpol'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user}]}) mknodat$loop(r1, &(0x7f0000000480)='./file0\x00', 0x400, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:41:46 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:46 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:59 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) r1 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r2, r1, r1, r3, r1], 0x6}, 0x58) r4 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = fcntl$getown(0xffffffffffffffff, 0x9) r6 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r5, r4, r4, r6, r4], 0x6}, 0x58) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/187, 0xbb}], 0x1, 0x5, 0x3, 0x26) r8 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6d706f683d707207430571526cb500"]) mknodat$loop(r8, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:41:59 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x0, 0x0, r3, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:41:59 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r1 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x3, 0x3, &(0x7f0000000300)=[{&(0x7f0000000180)="0e3a4c947d816a46d5de3a53de39e8fd57b9827e96f7523edccfcef6328615f20e3fca47", 0x24, 0xffff}, {&(0x7f00000001c0)="52f0483ec8721fba7e3c11d847158ba89941e9563149182d2a4fcef503d5f39cd5b1475208cb94464ef864e34ef2d6c52f6c9d62a2918cfc5a2fff3de956bfd10e7a854bb77eda4b23202fee68f6aabc4f8652ad", 0x54, 0x5}, {&(0x7f0000000240)="4a3c5c79e0ab52f0e9a415fa98593420480172f9771f6927408b89acb34e42f91965226d661834f71ae5850f8fce1b81f313034e9c2920e3ad8f274b9760e3b979b392ddcc3c180557a2de4ad24ccc3b6af4c5ec7ad44ea64ddfa7fcfd19c46d28b3824175ebcf3cc27887b01fe8e95289584b2063178008fb6e0628ff79d3586bcb6288f4781f3eb5", 0x89, 0x1f}], 0x108000, &(0x7f0000000380)={[{'!:^}/%:)%-@&{--:,%%,'}, {'mpol'}, {'@'}, {'mpol'}], [{@seclabel}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@fsname={'fsname', 0x3d, ',.+\\@-'}}, {@obj_type={'obj_type', 0x3d, 'mpol'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user}]}) mknodat$loop(r1, &(0x7f0000000480)='./file0\x00', 0x400, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:41:59 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x1, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r3}, './cgroup/cgroup.procs\x00'}) sync_file_range(r3, 0x7, 0x1f, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') 04:41:59 executing program 5: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:59 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:41:59 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:59 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/usblp', 0x88c02, 0xc) ioctl$PIO_FONTX(r2, 0x4b6c, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="00010420", @ANYRES16=r3, @ANYBLOB="00002cbd70000000000006000000080034000000000008000b00000000000500380000000000"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000180)={'syz_tun\x00', {0x2, 0x0, @broadcast}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0xc10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000004c}, 0x40010) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4085}, 0x0) r6 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r6, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x4000) creat(&(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x100) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:41:59 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) r1 = syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x3, 0x3, &(0x7f0000000300)=[{&(0x7f0000000180)="0e3a4c947d816a46d5de3a53de39e8fd57b9827e96f7523edccfcef6328615f20e3fca47", 0x24, 0xffff}, {&(0x7f00000001c0)="52f0483ec8721fba7e3c11d847158ba89941e9563149182d2a4fcef503d5f39cd5b1475208cb94464ef864e34ef2d6c52f6c9d62a2918cfc5a2fff3de956bfd10e7a854bb77eda4b23202fee68f6aabc4f8652ad", 0x54, 0x5}, {&(0x7f0000000240)="4a3c5c79e0ab52f0e9a415fa98593420480172f9771f6927408b89acb34e42f91965226d661834f71ae5850f8fce1b81f313034e9c2920e3ad8f274b9760e3b979b392ddcc3c180557a2de4ad24ccc3b6af4c5ec7ad44ea64ddfa7fcfd19c46d28b3824175ebcf3cc27887b01fe8e95289584b2063178008fb6e0628ff79d3586bcb6288f4781f3eb5", 0x89, 0x1f}], 0x108000, &(0x7f0000000380)={[{'!:^}/%:)%-@&{--:,%%,'}, {'mpol'}, {'@'}, {'mpol'}], [{@seclabel}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@fsname={'fsname', 0x3d, ',.+\\@-'}}, {@obj_type={'obj_type', 0x3d, 'mpol'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user}]}) mknodat$loop(r1, &(0x7f0000000480)='./file0\x00', 0x400, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:41:59 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:41:59 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x1, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r3}, './cgroup/cgroup.procs\x00'}) sync_file_range(r3, 0x7, 0x1f, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') 04:41:59 executing program 5: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) [ 1980.181682] tmpfs: Unknown parameter 'mpoh' 04:42:09 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x78000000, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x3000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ffb000/0x3000)=nil, 0x1000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) 04:42:09 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:42:09 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x12) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:42:09 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, 0x0, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:42:09 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x1, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r3}, './cgroup/cgroup.procs\x00'}) sync_file_range(r3, 0x7, 0x1f, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') 04:42:09 executing program 5: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:09 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:42:09 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x5000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:09 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:42:09 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x1, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r3}, './cgroup/cgroup.procs\x00'}) sync_file_range(r3, 0x7, 0x1f, 0x0) 04:42:09 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:09 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:42:09 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:09 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x20, 0x2, 0x0, 0xffff, 0x5, 0xff, 0x3, 0x9f, 0xb48, 0x8, 0x3d80, 0xff, 0x101, 0xfffffffffffffffb}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r3, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000200), 0x1000000, &(0x7f0000000240)={[{@cpuset_v2_mode}, {}, {@name}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@xattr}, {@clone_children}, {}, {@clone_children}], [{@dont_measure}, {@hash}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_lt={'fowner<', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@dont_measure}]}) lgetxattr(&(0x7f0000000300)='./cgroup/cgroup.procs\x00', &(0x7f0000000340)=@known='trusted.overlay.upper\x00', &(0x7f0000000380), 0x0) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:42:09 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ff9000/0x7000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) shmdt(r1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa) 04:42:09 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/76) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:42:09 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x1, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r3}, './cgroup/cgroup.procs\x00'}) 04:42:09 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, 0x0, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:42:22 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:22 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/76) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:42:22 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, 0x0, 0x6}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:42:22 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ff9000/0x7000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) shmdt(r1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa) 04:42:22 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x1, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 04:42:22 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:42:22 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x20, 0x2, 0x0, 0xffff, 0x5, 0xff, 0x3, 0x9f, 0xb48, 0x8, 0x3d80, 0xff, 0x101, 0xfffffffffffffffb}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r3, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000200), 0x1000000, &(0x7f0000000240)={[{@cpuset_v2_mode}, {}, {@name}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@xattr}, {@clone_children}, {}, {@clone_children}], [{@dont_measure}, {@hash}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_lt={'fowner<', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@dont_measure}]}) lgetxattr(&(0x7f0000000300)='./cgroup/cgroup.procs\x00', &(0x7f0000000340)=@known='trusted.overlay.upper\x00', &(0x7f0000000380), 0x0) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:42:22 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:22 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:22 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:42:22 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x2000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:22 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/76) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) 04:42:22 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ff9000/0x7000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000) shmdt(r1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xa) 04:42:22 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x20, 0x2, 0x0, 0xffff, 0x5, 0xff, 0x3, 0x9f, 0xb48, 0x8, 0x3d80, 0xff, 0x101, 0xfffffffffffffffb}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r3, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000200), 0x1000000, &(0x7f0000000240)={[{@cpuset_v2_mode}, {}, {@name}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@xattr}, {@clone_children}, {}, {@clone_children}], [{@dont_measure}, {@hash}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_lt={'fowner<', r3}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@dont_measure}]}) lgetxattr(&(0x7f0000000300)='./cgroup/cgroup.procs\x00', &(0x7f0000000340)=@known='trusted.overlay.upper\x00', &(0x7f0000000380), 0x0) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:42:22 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x1, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) 04:42:22 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:38 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:38 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:38 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x20, 0x2, 0x0, 0xffff, 0x5, 0xff, 0x3, 0x9f, 0xb48, 0x8, 0x3d80, 0xff, 0x101, 0xfffffffffffffffb}, 0x20, [0x0, 0x0, 0x0, 0x0]}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000200), 0x1000000, &(0x7f0000000240)={[{@cpuset_v2_mode}, {}, {@name}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@xattr}, {@clone_children}, {}, {@clone_children}], [{@dont_measure}, {@hash}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_lt={'fowner<', r2}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@dont_measure}]}) lgetxattr(&(0x7f0000000300)='./cgroup/cgroup.procs\x00', &(0x7f0000000340)=@known='trusted.overlay.upper\x00', &(0x7f0000000380), 0x0) 04:42:38 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/76) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) 04:42:38 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x1, 0x1) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:42:38 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:38 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:42:38 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:42:39 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) 04:42:39 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/76) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 04:42:39 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x1, 0x1) 04:42:39 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:39 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:39 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/76) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 04:42:39 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x20, 0x2, 0x0, 0xffff, 0x5, 0xff, 0x3, 0x9f, 0xb48, 0x8, 0x3d80, 0xff, 0x101, 0xfffffffffffffffb}, 0x20, [0x0, 0x0, 0x0, 0x0]}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000200), 0x1000000, &(0x7f0000000240)={[{@cpuset_v2_mode}, {}, {@name}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@xattr}, {@clone_children}, {}, {@clone_children}], [{@dont_measure}, {@hash}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_lt={'fowner<', r2}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@dont_measure}]}) 04:42:39 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:39 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x10) 04:42:39 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) 04:42:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) 04:42:50 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x20, 0x2, 0x0, 0xffff, 0x5, 0xff, 0x3, 0x9f, 0xb48, 0x8, 0x3d80, 0xff, 0x101, 0xfffffffffffffffb}, 0x20, [0x0, 0x0, 0x0, 0x0]}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) 04:42:50 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/76) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) 04:42:50 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x10) 04:42:50 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) 04:42:50 executing program 6: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000040)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x22cac0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f6365726f75702f6367726f75702e70722a857300"]) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./cgroup/cgroup.procs\x00') setresuid(0x0, r3, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r1, @ANYRES64=r5, @ANYRESHEX, @ANYRESHEX]) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="02002000", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="04000500000000000700000094bbcc3d7c15d3ee7dedbd39056c47b8490d5dbe4bd95b230c8748e1117e63b0c1e4b34e6ac3379c68268092963a2ffb13d2a63c", @ANYRES32=0x0, @ANYBLOB="10000400000000002000030000000000"], 0x4c, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:42:50 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:42:50 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:50 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/76) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 04:42:50 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x10) 04:42:50 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0x4) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:42:50 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 04:42:50 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x20, 0x2, 0x0, 0xffff, 0x5, 0xff, 0x3, 0x9f, 0xb48, 0x8, 0x3d80, 0xff, 0x101, 0xfffffffffffffffb}, 0x20, [0x0, 0x0, 0x0, 0x0]}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640), 0x1100) 04:42:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 04:42:50 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x66) 04:43:03 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3}) r6 = clone3(&(0x7f0000001140)={0x40000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:43:03 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) 04:43:03 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/76) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 04:43:03 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) 04:43:03 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x66) 04:43:03 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}, {@huge_never}]}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f00000001c0)={'trans=unix,', {[{@nodevmap}, {@uname={'uname', 0x3d, '^'}}, {@cache_none}, {@privport}, {@uname={'uname', 0x3d, 'prefer'}}, {@mmap}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'mpol'}}]}}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:03 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:03 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x20, 0x2, 0x0, 0xffff, 0x5, 0xff, 0x3, 0x9f, 0xb48, 0x8, 0x3d80, 0xff, 0x101, 0xfffffffffffffffb}, 0x20, [0x0, 0x0, 0x0, 0x0]}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) [ 2043.482981] tmpfs: Bad value for 'size' [ 2043.494027] 9pnet_fd: p9_fd_create_unix (22884): problem connecting socket: ./file0: -111 04:43:03 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:03 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x66) 04:43:03 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/76) 04:43:03 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) 04:43:03 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}, {@huge_never}]}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f00000001c0)={'trans=unix,', {[{@nodevmap}, {@uname={'uname', 0x3d, '^'}}, {@cache_none}, {@privport}, {@uname={'uname', 0x3d, 'prefer'}}, {@mmap}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'mpol'}}]}}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:03 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r0}, './cgroup/cgroup.procs\x00'}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) 04:43:03 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:03 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) [ 2043.713930] tmpfs: Bad value for 'size' 04:43:03 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 2043.723414] 9pnet_fd: p9_fd_create_unix (23000): problem connecting socket: ./file0: -111 04:43:15 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x66) 04:43:15 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) 04:43:15 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:15 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:15 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:43:15 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}, {@huge_never}]}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f00000001c0)={'trans=unix,', {[{@nodevmap}, {@uname={'uname', 0x3d, '^'}}, {@cache_none}, {@privport}, {@uname={'uname', 0x3d, 'prefer'}}, {@mmap}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'mpol'}}]}}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:15 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) 04:43:15 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) clone3(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r6 = fork() clone3(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r6, r7, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:43:15 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x66) 04:43:15 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:43:15 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 2055.653247] tmpfs: Bad value for 'size' [ 2055.671358] 9pnet_fd: p9_fd_create_unix (23024): problem connecting socket: ./file0: -111 04:43:15 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) 04:43:15 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:15 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) 04:43:15 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}, {@huge_never}]}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f00000001c0)={'trans=unix,', {[{@nodevmap}, {@uname={'uname', 0x3d, '^'}}, {@cache_none}, {@privport}, {@uname={'uname', 0x3d, 'prefer'}}, {@mmap}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@obj_type={'obj_type', 0x3d, 'mpol'}}]}}) 04:43:15 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) [ 2055.952053] tmpfs: Bad value for 'size' [ 2055.986742] 9pnet_fd: p9_fd_create_unix (23144): problem connecting socket: ./file0: -111 04:43:29 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}, {@huge_never}]}) 04:43:29 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:43:29 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) 04:43:29 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x66) 04:43:29 executing program 5: mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:29 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:29 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) 04:43:29 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) clone3(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r6 = fork() clone3(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r6, r7, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 2069.670683] tmpfs: Bad value for 'size' 04:43:29 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:43:29 executing program 4: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:29 executing program 5: mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:29 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}, {@huge_never}]}) 04:43:29 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) 04:43:29 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) 04:43:29 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x66) 04:43:29 executing program 5: mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:41 executing program 5: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:41 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:43:41 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) 04:43:41 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) clone3(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r6 = fork() clone3(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r6, r7, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:43:41 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:41 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) 04:43:41 executing program 1: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x66) 04:43:41 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}, {@huge_never}]}) 04:43:41 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) 04:43:41 executing program 4: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:41 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:43:41 executing program 6: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}, {@huge_never}]}) 04:43:41 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00\x00']) 04:43:41 executing program 1: sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x66) 04:43:41 executing program 5: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:41 executing program 4: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:41 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}, {@huge_never}]}) 04:43:41 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:43:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}, {@huge_never}]}) 04:43:55 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) 04:43:55 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:43:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:43:55 executing program 1: sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 04:43:55 executing program 5: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:55 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:43:55 executing program 4: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:55 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) 04:43:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:43:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}, {@huge_never}]}) 04:43:55 executing program 1: sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 04:43:55 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:55 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:43:55 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:55 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) 04:43:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:43:55 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:43:55 executing program 1: sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 04:43:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:43:55 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:43:55 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:44:05 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:44:05 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:44:05 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:44:05 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:44:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) 04:44:05 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x10) 04:44:05 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:05 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:44:05 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x10) 04:44:05 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) 04:44:18 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:44:18 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:18 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:44:18 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:44:18 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) 04:44:18 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x10) 04:44:18 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:18 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:44:18 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:44:18 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:44:18 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:18 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:18 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}, {@huge_always}]}) 04:44:18 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) [ 2118.595213] tmpfs: Bad value for 'size' 04:44:32 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x10) 04:44:32 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:44:32 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 04:44:32 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:44:32 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:32 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 04:44:32 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:44:32 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x6b, 0x39, 0x30, 0x37, 0x36, 0x74, 0x6b, 0x56]}}]}) 04:44:32 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB]) 04:44:32 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) [ 2132.400183] tmpfs: Bad value for 'size' 04:44:32 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:32 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:44:32 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 04:44:32 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) 04:44:32 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 04:44:42 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:44:42 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}, {@huge_always}]}) 04:44:42 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) (fail_nth: 1) 04:44:42 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:44:42 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=pre']) 04:44:42 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 04:44:42 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:42 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 04:44:42 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) [ 2142.948162] tmpfs: Bad value for 'size' [ 2142.967184] FAULT_INJECTION: forcing a failure. [ 2142.967184] name failslab, interval 1, probability 0, space 0, times 0 [ 2142.968331] CPU: 0 UID: 0 PID: 23876 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2142.968348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2142.968356] Call Trace: [ 2142.968361] [ 2142.968366] dump_stack_lvl+0xfa/0x120 [ 2142.968391] should_fail_ex+0x4d7/0x5e0 [ 2142.968414] ? vm_area_alloc+0x20/0x170 [ 2142.968427] should_failslab+0xc2/0x120 [ 2142.968439] kmem_cache_alloc_noprof+0x5f/0x470 [ 2142.968459] ? vma_merge_new_range+0x40e/0xa00 [ 2142.968478] vm_area_alloc+0x20/0x170 [ 2142.968490] __mmap_region+0xc46/0x2670 [ 2142.968509] ? lock_release+0xc8/0x290 [ 2142.968525] ? __pfx___mmap_region+0x10/0x10 [ 2142.968543] ? __kasan_unpoison_pages+0x2f/0x40 [ 2142.968564] ? should_fail_alloc_page+0xe8/0x110 [ 2142.968577] ? unwind_get_return_address+0x59/0xa0 [ 2142.968629] ? mm_get_unmapped_area+0x98/0xe0 [ 2142.968645] ? lock_is_held_type+0x9e/0x120 [ 2142.968666] mmap_region+0x314/0x3e0 [ 2142.968687] do_mmap+0xa36/0x11d0 [ 2142.968704] ? __pfx_do_mmap+0x10/0x10 [ 2142.968718] ? __pfx_down_write_killable+0x10/0x10 [ 2142.968736] __do_sys_remap_file_pages+0x99e/0xaf0 [ 2142.968757] ? __fget_files+0x20d/0x3b0 [ 2142.968777] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 2142.968795] ? fput+0x92/0xd0 [ 2142.968808] ? ksys_write+0x1a3/0x240 [ 2142.968827] ? __pfx_ksys_write+0x10/0x10 [ 2142.968847] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2142.968871] do_syscall_64+0xbf/0x360 [ 2142.968884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2142.968897] RIP: 0033:0x7fc234fa3b19 [ 2142.968907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2142.968919] RSP: 002b:00007fc232519188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 2142.968932] RAX: ffffffffffffffda RBX: 00007fc2350b6f60 RCX: 00007fc234fa3b19 [ 2142.968941] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 2142.968949] RBP: 00007fc2325191d0 R08: 0000000000000000 R09: 0000000000000000 [ 2142.968956] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 2142.968964] R13: 00007ffd1632ee7f R14: 00007fc232519300 R15: 0000000000022000 [ 2142.968980] [ 2142.982524] tmpfs: Bad value for 'mpol' 04:44:42 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:42 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x6d, 0x2d, 0x67]}}]}) 04:44:42 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) [ 2143.090800] tmpfs: Bad value for 'size' [ 2143.143448] tmpfs: Bad value for 'mpol' 04:44:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:44:55 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:44:55 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) (fail_nth: 2) 04:44:55 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) 04:44:55 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 04:44:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=pre']) 04:44:55 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave'}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33, 0x25]}}]}) [ 2155.869887] tmpfs: Bad value for 'mpol' [ 2155.894346] tmpfs: Bad value for 'mpol' [ 2155.905143] tmpfs: Bad value for 'mpol' [ 2155.908927] tmpfs: Bad value for 'size' 04:44:55 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave'}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:44:55 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) (fail_nth: 3) 04:44:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) 04:44:55 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) (fail_nth: 1) 04:44:55 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative'}}}]}) 04:44:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=pre']) [ 2156.068308] tmpfs: Bad value for 'mpol' [ 2156.139181] tmpfs: Bad value for 'mpol' [ 2156.140840] tmpfs: Bad value for 'mpol' 04:44:56 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave'}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:44:56 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) [ 2156.266479] tmpfs: Bad value for 'mpol' 04:45:09 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:45:09 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:45:09 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) (fail_nth: 4) 04:45:09 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]}) 04:45:09 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x0]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:45:09 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:']) 04:45:09 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x0]}}}}]}) 04:45:09 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 2169.816437] tmpfs: Bad value for 'mpol' 04:45:09 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d, 0x33]}}]}) 04:45:09 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:']) [ 2169.856159] tmpfs: Bad value for 'mpol' [ 2169.859944] tmpfs: Bad value for 'mpol' 04:45:09 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x0]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:45:09 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x0]}}}}]}) [ 2169.922173] tmpfs: Bad value for 'mpol' 04:45:09 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1002, 0x2) 04:45:09 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:45:09 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:']) [ 2169.961039] tmpfs: Bad value for 'size' 04:45:09 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) (fail_nth: 5) [ 2169.974871] tmpfs: Bad value for 'mpol' [ 2169.980369] tmpfs: Bad value for 'mpol' 04:45:09 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:45:09 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40, 0x2d]}}]}) [ 2170.058104] tmpfs: Bad value for 'mpol' [ 2170.067253] tmpfs: Bad value for 'size' [ 2170.073270] FAULT_INJECTION: forcing a failure. [ 2170.073270] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2170.074439] CPU: 1 UID: 0 PID: 24265 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2170.074456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2170.074463] Call Trace: [ 2170.074468] [ 2170.074474] dump_stack_lvl+0xfa/0x120 [ 2170.074501] should_fail_ex+0x4d7/0x5e0 [ 2170.074523] should_fail_alloc_page+0xe0/0x110 [ 2170.074538] prepare_alloc_pages+0x1af/0x500 [ 2170.074553] ? __lock_acquire+0x694/0x1b70 [ 2170.074569] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 2170.074587] ? __virt_addr_valid+0x1c6/0x5d0 [ 2170.074611] ? __virt_addr_valid+0x2e8/0x5d0 [ 2170.074628] ? lock_release+0xc8/0x290 [ 2170.074643] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2170.074665] ? inode_to_bdi+0x9c/0x140 [ 2170.074685] ? vma_wants_writenotify+0x19d/0x350 [ 2170.074703] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 2170.074720] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2170.074736] ? policy_nodemask+0xeb/0x4e0 [ 2170.074754] alloc_pages_mpol+0xed/0x340 [ 2170.074769] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2170.074786] ? mtree_range_walk+0x74a/0xb90 [ 2170.074805] alloc_pages_noprof+0xa1/0x380 [ 2170.074822] __pmd_alloc+0x3b/0x980 [ 2170.074839] __handle_mm_fault+0xcae/0x30f0 [ 2170.074857] ? __pfx_mt_find+0x10/0x10 [ 2170.074869] ? __pfx___handle_mm_fault+0x10/0x10 [ 2170.074892] ? find_vma+0xbf/0x140 [ 2170.074905] ? __pfx_find_vma+0x10/0x10 [ 2170.074920] handle_mm_fault+0x2c3/0x900 [ 2170.074939] __get_user_pages+0x58a/0x2f10 [ 2170.074967] ? __pfx___get_user_pages+0x10/0x10 [ 2170.074986] ? lock_is_held_type+0x9e/0x120 [ 2170.075006] populate_vma_page_range+0x282/0x410 [ 2170.075026] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2170.075044] ? __pfx_find_vma_intersection+0x10/0x10 [ 2170.075059] ? do_mmap+0x6a4/0x11d0 [ 2170.075074] __mm_populate+0x100/0x3a0 [ 2170.075094] ? __pfx___mm_populate+0x10/0x10 [ 2170.075113] ? up_write+0x195/0x520 [ 2170.075129] __do_sys_remap_file_pages+0x8a0/0xaf0 [ 2170.075149] ? __fget_files+0x20d/0x3b0 [ 2170.075173] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 2170.075192] ? fput+0x92/0xd0 [ 2170.075207] ? ksys_write+0x1a3/0x240 [ 2170.075226] ? __pfx_ksys_write+0x10/0x10 [ 2170.075244] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2170.075266] do_syscall_64+0xbf/0x360 [ 2170.075279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2170.075291] RIP: 0033:0x7fc234fa3b19 [ 2170.075301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2170.075313] RSP: 002b:00007fc232519188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 2170.075325] RAX: ffffffffffffffda RBX: 00007fc2350b6f60 RCX: 00007fc234fa3b19 [ 2170.075333] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 2170.075340] RBP: 00007fc2325191d0 R08: 0000000000000000 R09: 0000000000000000 [ 2170.075347] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 2170.075354] R13: 00007ffd1632ee7f R14: 00007fc232519300 R15: 0000000000022000 [ 2170.075369] 04:45:18 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x0]}}}}]}) 04:45:18 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:45:18 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:45:18 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) (fail_nth: 6) 04:45:18 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1003, 0x2) 04:45:18 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65, 0x40]}}]}) 04:45:18 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) 04:45:18 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x0]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 2178.941628] tmpfs: Bad value for 'mpol' [ 2178.942295] tmpfs: Bad value for 'size' [ 2178.965275] tmpfs: Bad value for 'mpol' 04:45:18 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:45:18 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30, 0x65]}}]}) [ 2179.004588] FAULT_INJECTION: forcing a failure. [ 2179.004588] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.005833] CPU: 1 UID: 0 PID: 24295 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2179.005851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2179.005859] Call Trace: [ 2179.005863] [ 2179.005868] dump_stack_lvl+0xfa/0x120 [ 2179.005895] should_fail_ex+0x4d7/0x5e0 [ 2179.005917] ? __pmd_alloc+0x98/0x980 [ 2179.005934] should_failslab+0xc2/0x120 [ 2179.005948] kmem_cache_alloc_noprof+0x5f/0x470 [ 2179.005970] __pmd_alloc+0x98/0x980 [ 2179.005988] __handle_mm_fault+0xcae/0x30f0 [ 2179.006006] ? __pfx_mt_find+0x10/0x10 [ 2179.006019] ? __pfx___handle_mm_fault+0x10/0x10 [ 2179.006044] ? find_vma+0xbf/0x140 [ 2179.006057] ? __pfx_find_vma+0x10/0x10 [ 2179.006073] handle_mm_fault+0x2c3/0x900 [ 2179.006094] __get_user_pages+0x58a/0x2f10 [ 2179.006122] ? __pfx___get_user_pages+0x10/0x10 [ 2179.006142] ? lock_is_held_type+0x9e/0x120 [ 2179.006164] populate_vma_page_range+0x282/0x410 [ 2179.006184] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2179.006203] ? __pfx_find_vma_intersection+0x10/0x10 [ 2179.006220] ? do_mmap+0x6a4/0x11d0 [ 2179.006236] __mm_populate+0x100/0x3a0 [ 2179.006256] ? __pfx___mm_populate+0x10/0x10 [ 2179.006276] ? up_write+0x195/0x520 [ 2179.006295] __do_sys_remap_file_pages+0x8a0/0xaf0 [ 2179.006316] ? __fget_files+0x20d/0x3b0 [ 2179.006335] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 2179.006354] ? fput+0x92/0xd0 [ 2179.006368] ? ksys_write+0x1a3/0x240 [ 2179.006387] ? __pfx_ksys_write+0x10/0x10 [ 2179.006407] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2179.006430] do_syscall_64+0xbf/0x360 [ 2179.006460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.006473] RIP: 0033:0x7fc234fa3b19 [ 2179.006483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2179.006496] RSP: 002b:00007fc232519188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 2179.006508] RAX: ffffffffffffffda RBX: 00007fc2350b6f60 RCX: 00007fc234fa3b19 [ 2179.006517] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 2179.006525] RBP: 00007fc2325191d0 R08: 0000000000000000 R09: 0000000000000000 [ 2179.006532] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 2179.006540] R13: 00007ffd1632ee7f R14: 00007fc232519300 R15: 0000000000022000 [ 2179.006556] [ 2179.052316] tmpfs: Bad value for 'size' 04:45:18 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1004, 0x2) 04:45:18 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:0']) 04:45:18 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:45:18 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) (fail_nth: 7) 04:45:32 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 04:45:32 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32, 0x30]}}]}) 04:45:32 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:45:32 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 1) 04:45:32 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:0']) 04:45:32 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1005, 0x2) 04:45:32 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) (fail_nth: 8) 04:45:32 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 2192.196907] tmpfs: Bad value for 'size' [ 2192.207372] FAULT_INJECTION: forcing a failure. [ 2192.207372] name failslab, interval 1, probability 0, space 0, times 0 [ 2192.208530] CPU: 1 UID: 0 PID: 24415 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2192.208551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2192.208560] Call Trace: [ 2192.208565] [ 2192.208572] dump_stack_lvl+0xfa/0x120 [ 2192.208602] should_fail_ex+0x4d7/0x5e0 [ 2192.208633] ? getname_flags.part.0+0x48/0x540 [ 2192.208652] should_failslab+0xc2/0x120 [ 2192.208668] kmem_cache_alloc_noprof+0x5f/0x470 [ 2192.208689] ? fput+0x92/0xd0 [ 2192.208706] ? ksys_write+0x1a3/0x240 [ 2192.208730] getname_flags.part.0+0x48/0x540 [ 2192.208749] __x64_sys_mkdir+0xdb/0x140 [ 2192.208773] do_syscall_64+0xbf/0x360 [ 2192.208789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.208805] RIP: 0033:0x7f12aea10c27 [ 2192.208817] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2192.208832] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2192.208846] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2192.208856] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2192.208866] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2192.208875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2192.208884] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2192.208904] [ 2192.241238] FAULT_INJECTION: forcing a failure. [ 2192.241238] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2192.243391] CPU: 0 UID: 0 PID: 24421 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2192.243424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2192.243437] Call Trace: [ 2192.243445] [ 2192.243453] dump_stack_lvl+0xfa/0x120 [ 2192.243499] should_fail_ex+0x4d7/0x5e0 [ 2192.243538] should_fail_alloc_page+0xe0/0x110 [ 2192.243564] prepare_alloc_pages+0x1af/0x500 [ 2192.243596] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 2192.243639] ? kernel_text_address+0x5b/0xc0 [ 2192.243665] ? __kernel_text_address+0xd/0x40 [ 2192.243688] ? unwind_get_return_address+0x59/0xa0 [ 2192.243722] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2192.243750] ? arch_stack_walk+0x9c/0xf0 [ 2192.243780] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2192.243829] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2192.243858] ? policy_nodemask+0xeb/0x4e0 [ 2192.243891] alloc_pages_mpol+0xed/0x340 [ 2192.243920] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2192.243958] alloc_pages_noprof+0xa1/0x380 [ 2192.243989] pte_alloc_one+0x1e/0x360 [ 2192.244024] __do_fault+0x30d/0x480 [ 2192.244053] __handle_mm_fault+0x119c/0x30f0 [ 2192.244087] ? __pfx_mt_find+0x10/0x10 [ 2192.244111] ? __pfx___handle_mm_fault+0x10/0x10 [ 2192.244157] ? find_vma+0xbf/0x140 [ 2192.244182] ? __pfx_find_vma+0x10/0x10 [ 2192.244211] handle_mm_fault+0x2c3/0x900 [ 2192.244249] __get_user_pages+0x58a/0x2f10 [ 2192.244302] ? __pfx___get_user_pages+0x10/0x10 [ 2192.244339] ? lock_is_held_type+0x9e/0x120 [ 2192.244378] populate_vma_page_range+0x282/0x410 [ 2192.244416] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2192.244451] ? __pfx_find_vma_intersection+0x10/0x10 [ 2192.244482] ? do_mmap+0x6a4/0x11d0 [ 2192.244512] __mm_populate+0x100/0x3a0 [ 2192.244549] ? __pfx___mm_populate+0x10/0x10 [ 2192.244587] ? up_write+0x195/0x520 [ 2192.244620] __do_sys_remap_file_pages+0x8a0/0xaf0 [ 2192.244658] ? __fget_files+0x20d/0x3b0 [ 2192.244693] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 2192.244727] ? fput+0x92/0xd0 [ 2192.244752] ? ksys_write+0x1a3/0x240 [ 2192.244786] ? __pfx_ksys_write+0x10/0x10 [ 2192.244823] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2192.244864] do_syscall_64+0xbf/0x360 04:45:32 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, 0x0, 0x0, 0x0) 04:45:32 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:0']) 04:45:32 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38, 0x32]}}]}) [ 2192.244888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.244912] RIP: 0033:0x7fc234fa3b19 [ 2192.244931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2192.244953] RSP: 002b:00007fc232519188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 2192.244976] RAX: ffffffffffffffda RBX: 00007fc2350b6f60 RCX: 00007fc234fa3b19 [ 2192.244991] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 2192.245006] RBP: 00007fc2325191d0 R08: 0000000000000000 R09: 0000000000000000 [ 2192.245020] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 2192.245034] R13: 00007ffd1632ee7f R14: 00007fc232519300 R15: 0000000000022000 [ 2192.245064] 04:45:32 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 04:45:32 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1006, 0x2) [ 2192.336525] tmpfs: Bad value for 'size' 04:45:32 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 2) 04:45:32 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) 04:45:32 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) (fail_nth: 9) 04:45:32 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, 0x0, 0x0, 0x0) [ 2192.472917] tmpfs: Bad value for 'size' 04:45:32 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 3) [ 2192.520106] FAULT_INJECTION: forcing a failure. [ 2192.520106] name failslab, interval 1, probability 0, space 0, times 0 [ 2192.521121] CPU: 1 UID: 0 PID: 24540 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2192.521138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2192.521146] Call Trace: [ 2192.521151] [ 2192.521156] dump_stack_lvl+0xfa/0x120 [ 2192.521183] should_fail_ex+0x4d7/0x5e0 [ 2192.521205] ? ptlock_alloc+0x21/0x70 [ 2192.521223] should_failslab+0xc2/0x120 [ 2192.521236] kmem_cache_alloc_noprof+0x5f/0x470 [ 2192.521258] ptlock_alloc+0x21/0x70 [ 2192.521276] pte_alloc_one+0x86/0x360 [ 2192.521297] __do_fault+0x30d/0x480 [ 2192.521311] __handle_mm_fault+0x119c/0x30f0 [ 2192.521329] ? __pfx_mt_find+0x10/0x10 [ 2192.521342] ? __pfx___handle_mm_fault+0x10/0x10 [ 2192.521365] ? find_vma+0xbf/0x140 [ 2192.521378] ? __pfx_find_vma+0x10/0x10 [ 2192.521394] handle_mm_fault+0x2c3/0x900 [ 2192.521413] __get_user_pages+0x58a/0x2f10 [ 2192.521441] ? __pfx___get_user_pages+0x10/0x10 [ 2192.521460] ? lock_is_held_type+0x9e/0x120 [ 2192.521480] populate_vma_page_range+0x282/0x410 [ 2192.521500] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2192.521518] ? __pfx_find_vma_intersection+0x10/0x10 [ 2192.521533] ? do_mmap+0x6a4/0x11d0 [ 2192.521548] __mm_populate+0x100/0x3a0 [ 2192.521568] ? __pfx___mm_populate+0x10/0x10 [ 2192.521587] ? up_write+0x195/0x520 [ 2192.521606] __do_sys_remap_file_pages+0x8a0/0xaf0 [ 2192.521630] ? __fget_files+0x20d/0x3b0 [ 2192.521648] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 2192.521666] ? fput+0x92/0xd0 [ 2192.521679] ? ksys_write+0x1a3/0x240 [ 2192.521697] ? __pfx_ksys_write+0x10/0x10 [ 2192.521715] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2192.521738] do_syscall_64+0xbf/0x360 [ 2192.521750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.521763] RIP: 0033:0x7fc234fa3b19 [ 2192.521773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2192.521785] RSP: 002b:00007fc232519188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 2192.521797] RAX: ffffffffffffffda RBX: 00007fc2350b6f60 RCX: 00007fc234fa3b19 [ 2192.521805] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 2192.521813] RBP: 00007fc2325191d0 R08: 0000000000000000 R09: 0000000000000000 [ 2192.521821] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 2192.521828] R13: 00007ffd1632ee7f R14: 00007fc232519300 R15: 0000000000022000 [ 2192.521844] [ 2192.560670] FAULT_INJECTION: forcing a failure. [ 2192.560670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2192.562406] CPU: 0 UID: 0 PID: 24543 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2192.562436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2192.562450] Call Trace: [ 2192.562458] [ 2192.562466] dump_stack_lvl+0xfa/0x120 [ 2192.562507] should_fail_ex+0x4d7/0x5e0 [ 2192.562543] strncpy_from_user+0x3b/0x2f0 [ 2192.562572] getname_flags.part.0+0x8d/0x540 [ 2192.562638] __x64_sys_mkdir+0xdb/0x140 [ 2192.562671] do_syscall_64+0xbf/0x360 [ 2192.562694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2192.562717] RIP: 0033:0x7f12aea10c27 [ 2192.562735] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2192.562755] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2192.562776] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2192.562791] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2192.562804] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2192.562817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2192.562830] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2192.562858] 04:45:42 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 04:45:42 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 4) 04:45:42 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, 0x0, 0x0, 0x0) 04:45:42 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1007, 0x2) 04:45:42 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65]}}]}) 04:45:42 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) (fail_nth: 10) 04:45:42 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, 0x0, {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:45:42 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 1) [ 2202.751074] FAULT_INJECTION: forcing a failure. [ 2202.751074] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.752021] CPU: 1 UID: 0 PID: 24553 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2202.752037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2202.752044] Call Trace: [ 2202.752049] [ 2202.752053] dump_stack_lvl+0xfa/0x120 [ 2202.752078] should_fail_ex+0x4d7/0x5e0 [ 2202.752098] ? getname_flags.part.0+0x48/0x540 [ 2202.752113] should_failslab+0xc2/0x120 [ 2202.752125] kmem_cache_alloc_noprof+0x5f/0x470 [ 2202.752142] ? fput+0x92/0xd0 [ 2202.752155] ? ksys_write+0x1a3/0x240 [ 2202.752173] getname_flags.part.0+0x48/0x540 [ 2202.752188] __x64_sys_mkdir+0xdb/0x140 [ 2202.752207] do_syscall_64+0xbf/0x360 [ 2202.752219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.752232] RIP: 0033:0x7fe071bc9c27 [ 2202.752242] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2202.752253] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2202.752265] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2202.752272] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2202.752280] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2202.752287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2202.752294] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2202.752309] 04:45:42 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 2) [ 2202.799973] FAULT_INJECTION: forcing a failure. [ 2202.799973] name failslab, interval 1, probability 0, space 0, times 0 [ 2202.801036] CPU: 1 UID: 0 PID: 24554 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2202.801054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2202.801061] Call Trace: [ 2202.801066] [ 2202.801070] dump_stack_lvl+0xfa/0x120 [ 2202.801097] should_fail_ex+0x4d7/0x5e0 [ 2202.801120] should_failslab+0xc2/0x120 [ 2202.801133] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 2202.801153] ? lock_release+0xc8/0x290 [ 2202.801169] ? __d_alloc+0x31/0xa10 [ 2202.801185] __d_alloc+0x31/0xa10 [ 2202.801198] d_alloc+0x4a/0x1e0 [ 2202.801211] lookup_one_qstr_excl+0x174/0x270 [ 2202.801226] ? mnt_want_write+0x153/0x420 [ 2202.801243] filename_create+0x1ca/0x480 [ 2202.801261] ? __pfx_filename_create+0x10/0x10 [ 2202.801278] ? __virt_addr_valid+0x2e8/0x5d0 [ 2202.801304] do_mkdirat+0x9a/0x3d0 [ 2202.801324] ? __pfx_do_mkdirat+0x10/0x10 [ 2202.801348] __x64_sys_mkdir+0xf3/0x140 [ 2202.801369] do_syscall_64+0xbf/0x360 [ 2202.801382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.801395] RIP: 0033:0x7f12aea10c27 [ 2202.801405] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2202.801417] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2202.801430] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2202.801438] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2202.801446] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2202.801454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2202.801461] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2202.801478] 04:45:42 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) 04:45:42 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) (fail_nth: 11) 04:45:42 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65]}}]}) 04:45:42 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 04:45:42 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (fail_nth: 1) 04:45:42 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 5) [ 2202.992045] FAULT_INJECTION: forcing a failure. [ 2202.992045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2202.993806] CPU: 0 UID: 0 PID: 24617 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2202.993835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2202.993848] Call Trace: [ 2202.993856] [ 2202.993865] dump_stack_lvl+0xfa/0x120 [ 2202.993905] should_fail_ex+0x4d7/0x5e0 [ 2202.993942] _copy_to_user+0x32/0xd0 [ 2202.993970] simple_read_from_buffer+0xe0/0x180 [ 2202.994002] proc_fail_nth_read+0x189/0x270 [ 2202.994035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2202.994067] ? security_file_permission+0x22/0x90 [ 2202.994092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2202.994123] vfs_read+0x1eb/0xbe0 [ 2202.994160] ? __pfx_vfs_read+0x10/0x10 [ 2202.994192] ? lock_release+0xc8/0x290 [ 2202.994220] ? __fget_files+0x20d/0x3b0 [ 2202.994260] ksys_read+0x121/0x240 [ 2202.994291] ? __pfx_ksys_read+0x10/0x10 [ 2202.994331] do_syscall_64+0xbf/0x360 [ 2202.994353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.994376] RIP: 0033:0x7fc234f5669c [ 2202.994393] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2202.994413] RSP: 002b:00007fc232519170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2202.994434] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc234f5669c [ 2202.994449] RDX: 000000000000000f RSI: 00007fc2325191e0 RDI: 0000000000000003 [ 2202.994462] RBP: 00007fc2325191d0 R08: 0000000000000000 R09: 0000000000000000 [ 2202.994475] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000002 [ 2202.994488] R13: 00007ffd1632ee7f R14: 00007fc232519300 R15: 0000000000022000 [ 2202.994517] 04:45:42 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 3) 04:45:42 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65]}}]}) 04:45:42 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x46, 0x0) [ 2203.152393] FAULT_INJECTION: forcing a failure. [ 2203.152393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2203.154182] CPU: 1 UID: 0 PID: 24680 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2203.154212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2203.154225] Call Trace: [ 2203.154233] [ 2203.154241] dump_stack_lvl+0xfa/0x120 [ 2203.154283] should_fail_ex+0x4d7/0x5e0 [ 2203.154319] strncpy_from_user+0x3b/0x2f0 [ 2203.154348] getname_flags.part.0+0x8d/0x540 [ 2203.154378] __x64_sys_mkdir+0xdb/0x140 [ 2203.154412] do_syscall_64+0xbf/0x360 [ 2203.154434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2203.154458] RIP: 0033:0x7fe071bc9c27 [ 2203.154474] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2203.154495] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2203.154516] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2203.154530] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2203.154543] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2203.154556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2203.154569] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2203.154597] 04:45:56 executing program 0: fallocate(0xffffffffffffffff, 0x0, 0x3, 0x3) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffb000/0x1000)=nil) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x1018, r1}, './cgroup/cgroup.procs\x00'}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffe40, r3, 0x20, 0x70bd2a, 0x25dffbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004005}, 0x0) readlink(0x0, 0x0, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x2000) r4 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ffa000/0x3000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:45:56 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 4) 04:45:56 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:45:56 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave'}}}]}) 04:45:56 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x0]}}]}) 04:45:56 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 04:45:56 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 6) 04:45:56 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x46, 0x0) [ 2216.289218] FAULT_INJECTION: forcing a failure. [ 2216.289218] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.291135] CPU: 0 UID: 0 PID: 24692 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2216.291167] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2216.291182] Call Trace: [ 2216.291190] [ 2216.291199] dump_stack_lvl+0xfa/0x120 [ 2216.291244] should_fail_ex+0x4d7/0x5e0 [ 2216.291285] should_failslab+0xc2/0x120 [ 2216.291310] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 2216.291348] ? ext4_alloc_inode+0x28/0x600 [ 2216.291388] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 2216.291428] ext4_alloc_inode+0x28/0x600 [ 2216.291466] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 2216.291502] alloc_inode+0x67/0x250 [ 2216.291529] new_inode+0x1e/0x160 [ 2216.291558] __ext4_new_inode+0x35a/0x4b90 [ 2216.291595] ? lock_release+0xc8/0x290 [ 2216.291634] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2216.291663] ? __dquot_initialize+0x29d/0xcf0 [ 2216.291690] ? __pfx___ext4_new_inode+0x10/0x10 [ 2216.291728] ? __pfx_avc_has_perm+0x10/0x10 [ 2216.291754] ? __pfx___dquot_initialize+0x10/0x10 [ 2216.291791] ext4_mkdir+0x331/0xb30 [ 2216.291827] ? __pfx_ext4_mkdir+0x10/0x10 [ 2216.291851] ? security_inode_permission+0x72/0xe0 [ 2216.291899] vfs_mkdir+0x59a/0x8d0 [ 2216.291935] do_mkdirat+0x19f/0x3d0 [ 2216.291974] ? __pfx_do_mkdirat+0x10/0x10 [ 2216.292020] __x64_sys_mkdir+0xf3/0x140 [ 2216.292058] do_syscall_64+0xbf/0x360 [ 2216.292084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2216.292109] RIP: 0033:0x7f12aea10c27 [ 2216.292127] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2216.292150] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2216.292174] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2216.292190] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2216.292204] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2216.292219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2216.292234] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2216.292267] [ 2216.347327] tmpfs: Bad value for 'mpol' [ 2216.384707] FAULT_INJECTION: forcing a failure. [ 2216.384707] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.386550] CPU: 0 UID: 0 PID: 24703 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2216.386579] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2216.386591] Call Trace: [ 2216.386598] [ 2216.386606] dump_stack_lvl+0xfa/0x120 [ 2216.386650] should_fail_ex+0x4d7/0x5e0 [ 2216.386685] should_failslab+0xc2/0x120 [ 2216.386706] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 2216.386737] ? lock_release+0xc8/0x290 [ 2216.386760] ? __d_alloc+0x31/0xa10 [ 2216.386785] __d_alloc+0x31/0xa10 [ 2216.386809] d_alloc+0x4a/0x1e0 [ 2216.386844] lookup_one_qstr_excl+0x174/0x270 [ 2216.386869] ? mnt_want_write+0x153/0x420 [ 2216.386899] filename_create+0x1ca/0x480 [ 2216.386929] ? __pfx_filename_create+0x10/0x10 [ 2216.386957] ? __virt_addr_valid+0x2e8/0x5d0 [ 2216.387001] do_mkdirat+0x9a/0x3d0 [ 2216.387035] ? __pfx_do_mkdirat+0x10/0x10 [ 2216.387076] __x64_sys_mkdir+0xf3/0x140 [ 2216.387110] do_syscall_64+0xbf/0x360 [ 2216.387132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2216.387154] RIP: 0033:0x7fe071bc9c27 [ 2216.387170] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2216.387190] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2216.387211] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2216.387225] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2216.387239] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2216.387253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2216.387266] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2216.387296] 04:46:05 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1003, 0x0, 0x46, 0x0) 04:46:05 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:46:05 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r2 = shmget(0x0, 0x1000, 0x40, &(0x7f0000fff000/0x1000)=nil) r3 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x2000) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x2000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmdt(r1) shmdt(r1) 04:46:05 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x0]}}]}) 04:46:05 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave'}}}]}) 04:46:05 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) 04:46:05 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 7) 04:46:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 5) [ 2225.495996] tmpfs: Bad value for 'mpol' 04:46:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 6) 04:46:05 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x3, 0x0) 04:46:05 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 8) 04:46:05 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x0]}}]}) [ 2225.562096] FAULT_INJECTION: forcing a failure. [ 2225.562096] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.563149] CPU: 1 UID: 0 PID: 24835 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2225.563166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.563174] Call Trace: [ 2225.563178] [ 2225.563183] dump_stack_lvl+0xfa/0x120 [ 2225.563211] should_fail_ex+0x4d7/0x5e0 [ 2225.563233] should_failslab+0xc2/0x120 [ 2225.563246] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 2225.563265] ? ext4_alloc_inode+0x28/0x600 [ 2225.563288] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 2225.563307] ext4_alloc_inode+0x28/0x600 [ 2225.563325] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 2225.563344] alloc_inode+0x67/0x250 [ 2225.563363] new_inode+0x1e/0x160 [ 2225.563382] __ext4_new_inode+0x35a/0x4b90 [ 2225.563404] ? lock_release+0xc8/0x290 [ 2225.563425] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2225.563443] ? __dquot_initialize+0x29d/0xcf0 [ 2225.563459] ? __pfx___ext4_new_inode+0x10/0x10 [ 2225.563477] ? __pfx_avc_has_perm+0x10/0x10 [ 2225.563489] ? __pfx___dquot_initialize+0x10/0x10 [ 2225.563508] ext4_mkdir+0x331/0xb30 [ 2225.563526] ? __pfx_ext4_mkdir+0x10/0x10 [ 2225.563537] ? security_inode_permission+0x72/0xe0 [ 2225.563561] vfs_mkdir+0x59a/0x8d0 [ 2225.563579] do_mkdirat+0x19f/0x3d0 [ 2225.563598] ? __pfx_do_mkdirat+0x10/0x10 [ 2225.563624] __x64_sys_mkdir+0xf3/0x140 [ 2225.563643] do_syscall_64+0xbf/0x360 [ 2225.563656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2225.563669] RIP: 0033:0x7fe071bc9c27 [ 2225.563678] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.563691] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2225.563703] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2225.563711] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2225.563719] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2225.563727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2225.563737] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2225.563758] 04:46:05 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave'}}}]}) 04:46:05 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1004, 0x0, 0x46, 0x0) 04:46:05 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) [ 2225.633563] tmpfs: Bad value for 'mpol' 04:46:05 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 9) 04:46:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 7) 04:46:14 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 10) 04:46:14 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) 04:46:14 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 8) 04:46:14 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:46:14 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:46:14 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1005, 0x0, 0x46, 0x0) 04:46:14 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x38]}}]}) 04:46:14 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x0]}}}}]}) [ 2234.718879] FAULT_INJECTION: forcing a failure. [ 2234.718879] name failslab, interval 1, probability 0, space 0, times 0 [ 2234.719918] CPU: 1 UID: 0 PID: 24962 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2234.719936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2234.719944] Call Trace: [ 2234.719949] [ 2234.719955] dump_stack_lvl+0xfa/0x120 [ 2234.719981] should_fail_ex+0x4d7/0x5e0 [ 2234.720003] ? security_inode_alloc+0x3e/0x130 [ 2234.720024] should_failslab+0xc2/0x120 [ 2234.720038] kmem_cache_alloc_noprof+0x5f/0x470 [ 2234.720057] ? lockdep_init_map_type+0x4b/0x240 [ 2234.720075] security_inode_alloc+0x3e/0x130 [ 2234.720095] inode_init_always_gfp+0xc94/0xff0 [ 2234.720118] alloc_inode+0x8d/0x250 [ 2234.720132] new_inode+0x1e/0x160 [ 2234.720147] __ext4_new_inode+0x35a/0x4b90 [ 2234.720170] ? lock_release+0xc8/0x290 [ 2234.720186] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2234.720202] ? __dquot_initialize+0x29d/0xcf0 [ 2234.720217] ? __pfx___ext4_new_inode+0x10/0x10 [ 2234.720237] ? __pfx_avc_has_perm+0x10/0x10 [ 2234.720250] ? __pfx___dquot_initialize+0x10/0x10 [ 2234.720270] ext4_mkdir+0x331/0xb30 [ 2234.720289] ? __pfx_ext4_mkdir+0x10/0x10 [ 2234.720302] ? security_inode_permission+0x72/0xe0 [ 2234.720326] vfs_mkdir+0x59a/0x8d0 [ 2234.720345] do_mkdirat+0x19f/0x3d0 [ 2234.720366] ? __pfx_do_mkdirat+0x10/0x10 [ 2234.720390] __x64_sys_mkdir+0xf3/0x140 [ 2234.720410] do_syscall_64+0xbf/0x360 [ 2234.720424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2234.720437] RIP: 0033:0x7fe071bc9c27 [ 2234.720447] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2234.720460] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2234.720472] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2234.720481] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2234.720489] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2234.720497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2234.720505] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2234.720522] [ 2234.737412] tmpfs: Bad value for 'mpol' [ 2234.738666] FAULT_INJECTION: forcing a failure. [ 2234.738666] name failslab, interval 1, probability 0, space 0, times 0 [ 2234.739635] CPU: 1 UID: 0 PID: 24969 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2234.739653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2234.739661] Call Trace: [ 2234.739665] [ 2234.739670] dump_stack_lvl+0xfa/0x120 [ 2234.739696] should_fail_ex+0x4d7/0x5e0 [ 2234.739717] ? jbd2__journal_start+0x193/0x6b0 [ 2234.739732] should_failslab+0xc2/0x120 [ 2234.739744] kmem_cache_alloc_noprof+0x5f/0x470 [ 2234.739763] ? lock_is_held_type+0x9e/0x120 [ 2234.739787] jbd2__journal_start+0x193/0x6b0 [ 2234.739804] __ext4_journal_start_sb+0x325/0x5d0 [ 2234.739828] __ext4_new_inode+0x2c38/0x4b90 [ 2234.739856] ? __pfx___ext4_new_inode+0x10/0x10 [ 2234.739878] ? __pfx_avc_has_perm+0x10/0x10 [ 2234.739892] ? __pfx___dquot_initialize+0x10/0x10 [ 2234.739912] ext4_mkdir+0x331/0xb30 [ 2234.739932] ? __pfx_ext4_mkdir+0x10/0x10 [ 2234.739945] ? security_inode_permission+0x72/0xe0 [ 2234.739971] vfs_mkdir+0x59a/0x8d0 [ 2234.739990] do_mkdirat+0x19f/0x3d0 [ 2234.740012] ? __pfx_do_mkdirat+0x10/0x10 [ 2234.740038] __x64_sys_mkdir+0xf3/0x140 [ 2234.740059] do_syscall_64+0xbf/0x360 [ 2234.740073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2234.740088] RIP: 0033:0x7f12aea10c27 [ 2234.740100] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2234.740114] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2234.740127] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2234.740136] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2234.740144] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2234.740153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2234.740161] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2234.740179] [ 2234.740199] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory 04:46:14 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 9) 04:46:14 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x38]}}]}) 04:46:14 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffa000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmdt(r1) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) 04:46:14 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x5, 0x0) 04:46:14 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 11) 04:46:14 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x0]}}}}]}) [ 2234.916579] FAULT_INJECTION: forcing a failure. [ 2234.916579] name failslab, interval 1, probability 0, space 0, times 0 [ 2234.918433] CPU: 1 UID: 0 PID: 25026 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2234.918465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2234.918477] Call Trace: [ 2234.918485] [ 2234.918493] dump_stack_lvl+0xfa/0x120 [ 2234.918533] should_fail_ex+0x4d7/0x5e0 [ 2234.918569] ? jbd2__journal_start+0x193/0x6b0 [ 2234.918592] should_failslab+0xc2/0x120 04:46:14 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1006, 0x0, 0x46, 0x0) [ 2234.918621] kmem_cache_alloc_noprof+0x5f/0x470 [ 2234.918652] ? lock_is_held_type+0x9e/0x120 [ 2234.918690] jbd2__journal_start+0x193/0x6b0 [ 2234.918717] __ext4_journal_start_sb+0x325/0x5d0 [ 2234.918755] __ext4_new_inode+0x2c38/0x4b90 [ 2234.918802] ? __pfx___ext4_new_inode+0x10/0x10 [ 2234.918836] ? __pfx_avc_has_perm+0x10/0x10 [ 2234.918860] ? __pfx___dquot_initialize+0x10/0x10 [ 2234.918896] ext4_mkdir+0x331/0xb30 [ 2234.918928] ? __pfx_ext4_mkdir+0x10/0x10 [ 2234.918949] ? security_inode_permission+0x72/0xe0 [ 2234.918992] vfs_mkdir+0x59a/0x8d0 [ 2234.919024] do_mkdirat+0x19f/0x3d0 [ 2234.919071] ? __pfx_do_mkdirat+0x10/0x10 [ 2234.919113] __x64_sys_mkdir+0xf3/0x140 [ 2234.919147] do_syscall_64+0xbf/0x360 [ 2234.919170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2234.919193] RIP: 0033:0x7f12aea10c27 [ 2234.919210] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2234.919231] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2234.919252] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2234.919267] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2234.919280] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2234.919294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2234.919307] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2234.919336] [ 2234.946639] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory 04:46:14 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 12) 04:46:14 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 10) [ 2235.082455] tmpfs: Bad value for 'mpol' 04:46:14 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, 0x0, 0x0, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:46:14 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x38]}}]}) [ 2235.170107] FAULT_INJECTION: forcing a failure. [ 2235.170107] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.173062] CPU: 1 UID: 0 PID: 25094 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2235.173093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.173106] Call Trace: [ 2235.173114] [ 2235.173122] dump_stack_lvl+0xfa/0x120 [ 2235.173162] should_fail_ex+0x4d7/0x5e0 [ 2235.173197] ? security_inode_init_security+0x13d/0x390 [ 2235.173227] should_failslab+0xc2/0x120 [ 2235.173249] __kmalloc_noprof+0xb4/0x4c0 [ 2235.173276] ? posix_acl_create.part.0+0x2a0/0x480 [ 2235.173314] security_inode_init_security+0x13d/0x390 [ 2235.173344] ? __pfx_ext4_initxattrs+0x10/0x10 [ 2235.173367] ? __pfx_security_inode_init_security+0x10/0x10 [ 2235.173400] ? crc32c+0x1ae/0x320 [ 2235.173422] __ext4_new_inode+0x3378/0x4b90 [ 2235.173469] ? __pfx___ext4_new_inode+0x10/0x10 [ 2235.173505] ? __pfx___dquot_initialize+0x10/0x10 [ 2235.173539] ext4_mkdir+0x331/0xb30 [ 2235.173572] ? __pfx_ext4_mkdir+0x10/0x10 [ 2235.173593] ? security_inode_permission+0x72/0xe0 [ 2235.173643] vfs_mkdir+0x59a/0x8d0 [ 2235.173675] do_mkdirat+0x19f/0x3d0 [ 2235.173709] ? __pfx_do_mkdirat+0x10/0x10 [ 2235.173751] __x64_sys_mkdir+0xf3/0x140 [ 2235.173785] do_syscall_64+0xbf/0x360 [ 2235.173808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2235.173832] RIP: 0033:0x7f12aea10c27 [ 2235.173849] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.173870] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2235.173892] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2235.173906] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2235.173919] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2235.173933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2235.173946] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2235.173976] [ 2235.208542] FAULT_INJECTION: forcing a failure. [ 2235.208542] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.210174] CPU: 1 UID: 0 PID: 25097 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2235.210208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2235.210220] Call Trace: [ 2235.210227] [ 2235.210236] dump_stack_lvl+0xfa/0x120 [ 2235.210271] should_fail_ex+0x4d7/0x5e0 [ 2235.210305] ? jbd2__journal_start+0x193/0x6b0 [ 2235.210326] should_failslab+0xc2/0x120 [ 2235.210347] kmem_cache_alloc_noprof+0x5f/0x470 [ 2235.210377] ? lock_is_held_type+0x9e/0x120 [ 2235.210414] jbd2__journal_start+0x193/0x6b0 [ 2235.210442] __ext4_journal_start_sb+0x325/0x5d0 [ 2235.210479] __ext4_new_inode+0x2c38/0x4b90 [ 2235.210526] ? __pfx___ext4_new_inode+0x10/0x10 [ 2235.210560] ? __pfx_avc_has_perm+0x10/0x10 [ 2235.210584] ? __pfx___dquot_initialize+0x10/0x10 [ 2235.210625] ext4_mkdir+0x331/0xb30 [ 2235.210656] ? __pfx_ext4_mkdir+0x10/0x10 [ 2235.210677] ? security_inode_permission+0x72/0xe0 [ 2235.210719] vfs_mkdir+0x59a/0x8d0 [ 2235.210750] do_mkdirat+0x19f/0x3d0 [ 2235.210785] ? __pfx_do_mkdirat+0x10/0x10 [ 2235.210827] __x64_sys_mkdir+0xf3/0x140 [ 2235.210861] do_syscall_64+0xbf/0x360 [ 2235.210883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2235.210905] RIP: 0033:0x7fe071bc9c27 [ 2235.210921] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2235.210942] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2235.210963] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2235.210977] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2235.210991] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2235.211004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2235.211017] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2235.211059] [ 2235.236410] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory 04:46:27 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, 0x0, 0x0, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:46:27 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1007, 0x0, 0x46, 0x0) 04:46:27 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x6, 0x0) 04:46:27 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 11) 04:46:27 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r1 = shmget(0x3, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x6000) r2 = shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) shmdt(r2) 04:46:27 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x0]}}}}]}) 04:46:27 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 13) 04:46:27 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x0, 0x38]}}]}) [ 2247.262860] tmpfs: Bad value for 'mpol' [ 2247.290372] tmpfs: Bad value for 'size' [ 2247.297169] FAULT_INJECTION: forcing a failure. [ 2247.297169] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.299099] CPU: 1 UID: 0 PID: 25224 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2247.299130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.299143] Call Trace: [ 2247.299150] [ 2247.299159] dump_stack_lvl+0xfa/0x120 [ 2247.299228] should_fail_ex+0x4d7/0x5e0 [ 2247.299278] ? security_inode_init_security+0x13d/0x390 [ 2247.299315] should_failslab+0xc2/0x120 [ 2247.299337] __kmalloc_noprof+0xb4/0x4c0 [ 2247.299366] ? posix_acl_create.part.0+0x2a0/0x480 [ 2247.299404] security_inode_init_security+0x13d/0x390 [ 2247.299434] ? __pfx_ext4_initxattrs+0x10/0x10 [ 2247.299458] ? __pfx_security_inode_init_security+0x10/0x10 [ 2247.299492] ? crc32c+0x1ae/0x320 [ 2247.299514] __ext4_new_inode+0x3378/0x4b90 [ 2247.299562] ? __pfx___ext4_new_inode+0x10/0x10 [ 2247.299599] ? __pfx___dquot_initialize+0x10/0x10 [ 2247.299641] ext4_mkdir+0x331/0xb30 [ 2247.299674] ? __pfx_ext4_mkdir+0x10/0x10 [ 2247.299695] ? security_inode_permission+0x72/0xe0 [ 2247.299738] vfs_mkdir+0x59a/0x8d0 [ 2247.299772] do_mkdirat+0x19f/0x3d0 [ 2247.299808] ? __pfx_do_mkdirat+0x10/0x10 [ 2247.299850] __x64_sys_mkdir+0xf3/0x140 [ 2247.299884] do_syscall_64+0xbf/0x360 [ 2247.299907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2247.299930] RIP: 0033:0x7f12aea10c27 [ 2247.299947] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.299969] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2247.299990] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2247.300005] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2247.300018] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2247.300031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2247.300045] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2247.300074] 04:46:27 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x7, 0x0) 04:46:27 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmctl$IPC_RMID(r0, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:46:27 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1021, 0x0, 0x46, 0x0) 04:46:27 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) (fail_nth: 1) 04:46:27 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 12) 04:46:27 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x0, 0x38]}}]}) [ 2247.569754] FAULT_INJECTION: forcing a failure. [ 2247.569754] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.571691] CPU: 1 UID: 0 PID: 25338 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2247.571723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.571736] Call Trace: [ 2247.571744] [ 2247.571752] dump_stack_lvl+0xfa/0x120 [ 2247.571795] should_fail_ex+0x4d7/0x5e0 [ 2247.571838] ? security_inode_init_security+0x13d/0x390 [ 2247.571869] should_failslab+0xc2/0x120 [ 2247.571891] __kmalloc_noprof+0xb4/0x4c0 [ 2247.571927] ? posix_acl_create.part.0+0x2a0/0x480 [ 2247.571966] security_inode_init_security+0x13d/0x390 [ 2247.571996] ? __pfx_ext4_initxattrs+0x10/0x10 [ 2247.572019] ? __pfx_security_inode_init_security+0x10/0x10 [ 2247.572054] ? crc32c+0x1ae/0x320 [ 2247.572077] __ext4_new_inode+0x3378/0x4b90 [ 2247.572125] ? __pfx___ext4_new_inode+0x10/0x10 [ 2247.572161] ? __pfx___dquot_initialize+0x10/0x10 [ 2247.572196] ext4_mkdir+0x331/0xb30 [ 2247.572229] ? __pfx_ext4_mkdir+0x10/0x10 [ 2247.572250] ? security_inode_permission+0x72/0xe0 [ 2247.572292] vfs_mkdir+0x59a/0x8d0 [ 2247.572324] do_mkdirat+0x19f/0x3d0 [ 2247.572360] ? __pfx_do_mkdirat+0x10/0x10 [ 2247.572401] __x64_sys_mkdir+0xf3/0x140 [ 2247.572436] do_syscall_64+0xbf/0x360 [ 2247.572459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2247.572482] RIP: 0033:0x7fe071bc9c27 [ 2247.572501] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.572523] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2247.572545] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2247.572560] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2247.572574] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2247.572588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2247.572601] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2247.572640] [ 2247.572896] tmpfs: Bad value for 'size' 04:46:40 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:46:40 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 13) 04:46:40 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x0, 0x38]}}]}) 04:46:40 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmget(0x1, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:46:40 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x10b1, 0x0, 0x46, 0x0) 04:46:40 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, 0x0, 0x0, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:46:40 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 14) 04:46:40 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0x0) [ 2260.308941] FAULT_INJECTION: forcing a failure. [ 2260.308941] name failslab, interval 1, probability 0, space 0, times 0 [ 2260.310995] CPU: 1 UID: 0 PID: 25350 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2260.311027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2260.311041] Call Trace: [ 2260.311049] [ 2260.311059] dump_stack_lvl+0xfa/0x120 [ 2260.311102] should_fail_ex+0x4d7/0x5e0 [ 2260.311136] ? __ext4_new_inode+0x3378/0x4b90 [ 2260.311175] should_failslab+0xc2/0x120 [ 2260.311199] __kmalloc_node_track_caller_noprof+0xb8/0x4a0 [ 2260.311233] ? sidtab_sid2str_get+0x85/0x6f0 [ 2260.311271] ? sidtab_sid2str_get+0x17e/0x6f0 [ 2260.311323] kmemdup_noprof+0x2b/0x60 [ 2260.311359] sidtab_sid2str_get+0x17e/0x6f0 [ 2260.311399] sidtab_entry_to_string+0x33/0x110 [ 2260.311435] security_sid_to_context_core+0x350/0x620 [ 2260.311473] selinux_inode_init_security+0x433/0x650 [ 2260.311513] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 2260.311548] ? __kasan_kmalloc+0x7f/0x90 [ 2260.311572] ? trace_kmalloc+0x1f/0xb0 [ 2260.311595] ? posix_acl_create.part.0+0x2a0/0x480 [ 2260.311642] security_inode_init_security+0x1e6/0x390 [ 2260.311675] ? __pfx_ext4_initxattrs+0x10/0x10 [ 2260.311700] ? __pfx_security_inode_init_security+0x10/0x10 [ 2260.311736] ? crc32c+0x1ae/0x320 [ 2260.311760] __ext4_new_inode+0x3378/0x4b90 [ 2260.311810] ? __pfx___ext4_new_inode+0x10/0x10 [ 2260.311850] ? __pfx___dquot_initialize+0x10/0x10 [ 2260.311887] ext4_mkdir+0x331/0xb30 [ 2260.311922] ? __pfx_ext4_mkdir+0x10/0x10 [ 2260.311945] ? security_inode_permission+0x72/0xe0 [ 2260.311990] vfs_mkdir+0x59a/0x8d0 [ 2260.312025] do_mkdirat+0x19f/0x3d0 [ 2260.312063] ? __pfx_do_mkdirat+0x10/0x10 [ 2260.312108] __x64_sys_mkdir+0xf3/0x140 [ 2260.312145] do_syscall_64+0xbf/0x360 [ 2260.312170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.312194] RIP: 0033:0x7f12aea10c27 [ 2260.312212] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2260.312236] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2260.312259] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2260.312274] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2260.312288] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2260.312303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2260.312317] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2260.312350] [ 2260.321552] tmpfs: Bad value for 'size' 04:46:40 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x10f5, 0x0, 0x46, 0x0) 04:46:40 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) 04:46:40 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 14) 04:46:40 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:46:40 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 15) [ 2260.510492] FAULT_INJECTION: forcing a failure. [ 2260.510492] name failslab, interval 1, probability 0, space 0, times 0 [ 2260.512222] CPU: 0 UID: 0 PID: 25393 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2260.512253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2260.512266] Call Trace: [ 2260.512274] [ 2260.512283] dump_stack_lvl+0xfa/0x120 [ 2260.512325] should_fail_ex+0x4d7/0x5e0 [ 2260.512357] ? __ext4_new_inode+0x3378/0x4b90 [ 2260.512395] should_failslab+0xc2/0x120 [ 2260.512418] __kmalloc_node_track_caller_noprof+0xb8/0x4a0 [ 2260.512450] ? sidtab_sid2str_get+0x85/0x6f0 [ 2260.512485] ? sidtab_sid2str_get+0x17e/0x6f0 [ 2260.512523] kmemdup_noprof+0x2b/0x60 [ 2260.512558] sidtab_sid2str_get+0x17e/0x6f0 [ 2260.512595] sidtab_entry_to_string+0x33/0x110 [ 2260.512637] security_sid_to_context_core+0x350/0x620 [ 2260.512675] selinux_inode_init_security+0x433/0x650 [ 2260.512715] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 2260.512747] ? __kasan_kmalloc+0x7f/0x90 [ 2260.512770] ? trace_kmalloc+0x1f/0xb0 [ 2260.512792] ? posix_acl_create.part.0+0x2a0/0x480 [ 2260.512829] security_inode_init_security+0x1e6/0x390 [ 2260.512861] ? __pfx_ext4_initxattrs+0x10/0x10 [ 2260.512885] ? __pfx_security_inode_init_security+0x10/0x10 [ 2260.512918] ? crc32c+0x1ae/0x320 [ 2260.512942] __ext4_new_inode+0x3378/0x4b90 [ 2260.512988] ? __pfx___ext4_new_inode+0x10/0x10 [ 2260.513025] ? __pfx___dquot_initialize+0x10/0x10 [ 2260.513061] ext4_mkdir+0x331/0xb30 [ 2260.513094] ? __pfx_ext4_mkdir+0x10/0x10 [ 2260.513115] ? security_inode_permission+0x72/0xe0 [ 2260.513158] vfs_mkdir+0x59a/0x8d0 [ 2260.513190] do_mkdirat+0x19f/0x3d0 [ 2260.513226] ? __pfx_do_mkdirat+0x10/0x10 [ 2260.513268] __x64_sys_mkdir+0xf3/0x140 [ 2260.513303] do_syscall_64+0xbf/0x360 [ 2260.513326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.513349] RIP: 0033:0x7fe071bc9c27 [ 2260.513367] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2260.513389] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2260.513411] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2260.513426] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2260.513440] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2260.513454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2260.513467] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2260.513498] 04:46:40 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x65, 0x38]}}]}) 04:46:40 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_INFO(0x0, 0x27, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/4096) r1 = shmget(0x1, 0x1000, 0x40, &(0x7f0000ffe000/0x1000)=nil) shmat(r1, &(0x7f0000fec000/0x14000)=nil, 0x5000) shmat(r1, &(0x7f0000ffe000/0x1000)=nil, 0x0) madvise(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x12) r2 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmdt(r2) shmdt(r2) 04:46:40 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1900, 0x0, 0x46, 0x0) 04:46:40 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x60, 0x0) [ 2260.648443] tmpfs: Bad value for 'size' 04:46:40 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 16) 04:46:40 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 15) [ 2260.766206] FAULT_INJECTION: forcing a failure. [ 2260.766206] name failslab, interval 1, probability 0, space 0, times 0 [ 2260.768185] CPU: 1 UID: 0 PID: 25484 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2260.768215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2260.768228] Call Trace: [ 2260.768235] [ 2260.768243] dump_stack_lvl+0xfa/0x120 [ 2260.768284] should_fail_ex+0x4d7/0x5e0 [ 2260.768319] ? ext4_find_extent+0x7f5/0xa00 [ 2260.768339] should_failslab+0xc2/0x120 [ 2260.768361] __kmalloc_noprof+0xb4/0x4c0 [ 2260.768389] ? __is_insn_slot_addr+0x2e/0x290 [ 2260.768427] ext4_find_extent+0x7f5/0xa00 [ 2260.768455] ext4_ext_map_blocks+0x1cc/0x5f30 [ 2260.768485] ? lock_is_held_type+0x9e/0x120 [ 2260.768527] ? bdev_getblk+0x98/0x680 [ 2260.768561] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2260.768585] ? ext4_get_group_desc+0x294/0x550 [ 2260.768623] ? map_id_range_up+0x1d5/0x350 [ 2260.768644] ? crc32c+0x1ae/0x320 [ 2260.768662] ? look_up_lock_class+0x56/0x150 [ 2260.768694] ? register_lock_class+0x41/0x560 [ 2260.768722] ? __lock_acquire+0xc65/0x1b70 [ 2260.768757] ? lock_acquire+0xdf/0x2e0 [ 2260.768778] ? ext4_map_blocks+0x4b0/0x15a0 [ 2260.768811] ext4_map_query_blocks+0x117/0x890 [ 2260.768839] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 2260.768864] ? __pfx_down_read+0x10/0x10 [ 2260.768885] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2260.768919] ext4_map_blocks+0x4c3/0x15a0 [ 2260.768950] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2260.768986] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2260.769018] ? __pfx_security_inode_init_security+0x10/0x10 [ 2260.769053] ? crc32c+0x1ae/0x320 [ 2260.769072] ? __brelse+0x7f/0xa0 [ 2260.769102] ext4_append+0x1b6/0x530 [ 2260.769136] ? __pfx_ext4_append+0x10/0x10 [ 2260.769171] ? __pfx___ext4_new_inode+0x10/0x10 [ 2260.769209] ext4_init_new_dir+0x21e/0x460 [ 2260.769234] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2260.769267] ext4_mkdir+0x3c5/0xb30 [ 2260.769294] ? __pfx_ext4_mkdir+0x10/0x10 [ 2260.769316] ? security_inode_permission+0x72/0xe0 [ 2260.769357] vfs_mkdir+0x59a/0x8d0 [ 2260.769389] do_mkdirat+0x19f/0x3d0 [ 2260.769425] ? __pfx_do_mkdirat+0x10/0x10 [ 2260.769466] __x64_sys_mkdir+0xf3/0x140 [ 2260.769500] do_syscall_64+0xbf/0x360 [ 2260.769523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.769546] RIP: 0033:0x7f12aea10c27 [ 2260.769563] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2260.769584] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2260.769606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2260.769621] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2260.769635] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2260.769648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2260.769661] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2260.769691] 04:46:50 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x65, 0x38]}}]}) 04:46:50 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 17) 04:46:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:46:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 16) 04:46:50 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) r1 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x3000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001) 04:46:50 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x46000, 0x0, 0x46, 0x0) 04:46:50 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, 0x0, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:46:50 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x66, 0x0) [ 2270.421156] tmpfs: Bad value for 'size' 04:46:50 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x46, 0x0) 04:46:50 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x300, 0x0) [ 2270.457233] FAULT_INJECTION: forcing a failure. [ 2270.457233] name failslab, interval 1, probability 0, space 0, times 0 [ 2270.459247] CPU: 0 UID: 0 PID: 25505 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2270.459280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2270.459293] Call Trace: [ 2270.459301] [ 2270.459310] dump_stack_lvl+0xfa/0x120 [ 2270.459354] should_fail_ex+0x4d7/0x5e0 [ 2270.459393] ? ext4_find_extent+0x7f5/0xa00 [ 2270.459430] should_failslab+0xc2/0x120 [ 2270.459459] __kmalloc_noprof+0xb4/0x4c0 [ 2270.459489] ? __is_insn_slot_addr+0x2e/0x290 [ 2270.459529] ext4_find_extent+0x7f5/0xa00 [ 2270.459559] ext4_ext_map_blocks+0x1cc/0x5f30 [ 2270.459591] ? lock_is_held_type+0x9e/0x120 [ 2270.459642] ? bdev_getblk+0x98/0x680 [ 2270.459679] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2270.459704] ? ext4_get_group_desc+0x294/0x550 [ 2270.459737] ? map_id_range_up+0x1d5/0x350 [ 2270.459761] ? crc32c+0x1ae/0x320 [ 2270.459779] ? look_up_lock_class+0x56/0x150 [ 2270.459813] ? register_lock_class+0x41/0x560 [ 2270.459845] ? __lock_acquire+0xc65/0x1b70 [ 2270.459881] ? lock_acquire+0xdf/0x2e0 [ 2270.459904] ? ext4_map_blocks+0x4b0/0x15a0 [ 2270.459940] ext4_map_query_blocks+0x117/0x890 [ 2270.459970] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 2270.459998] ? __pfx_down_read+0x10/0x10 [ 2270.460020] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2270.460056] ext4_map_blocks+0x4c3/0x15a0 [ 2270.460089] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2270.460128] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2270.460163] ? __pfx_security_inode_init_security+0x10/0x10 [ 2270.460202] ? crc32c+0x1ae/0x320 [ 2270.460222] ? __brelse+0x7f/0xa0 [ 2270.460254] ext4_append+0x1b6/0x530 [ 2270.460290] ? __pfx_ext4_append+0x10/0x10 [ 2270.460329] ? __pfx___ext4_new_inode+0x10/0x10 [ 2270.460369] ext4_init_new_dir+0x21e/0x460 [ 2270.460396] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2270.460431] ext4_mkdir+0x3c5/0xb30 [ 2270.460461] ? __pfx_ext4_mkdir+0x10/0x10 [ 2270.460484] ? security_inode_permission+0x72/0xe0 [ 2270.460529] vfs_mkdir+0x59a/0x8d0 [ 2270.460564] do_mkdirat+0x19f/0x3d0 [ 2270.460602] ? __pfx_do_mkdirat+0x10/0x10 [ 2270.460648] __x64_sys_mkdir+0xf3/0x140 [ 2270.460684] do_syscall_64+0xbf/0x360 [ 2270.460709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2270.460733] RIP: 0033:0x7fe071bc9c27 [ 2270.460751] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2270.460774] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2270.460796] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2270.460812] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2270.460826] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2270.460841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2270.460854] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2270.460887] 04:46:50 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/34) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/202) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r2, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000008) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x17) shmctl$IPC_RMID(r0, 0x0) 04:46:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:46:50 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x46, 0x0) 04:46:50 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x408, 0x0) 04:46:50 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 18) [ 2270.665235] FAULT_INJECTION: forcing a failure. [ 2270.665235] name failslab, interval 1, probability 0, space 0, times 0 [ 2270.666479] CPU: 1 UID: 0 PID: 25555 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2270.666496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2270.666504] Call Trace: [ 2270.666509] [ 2270.666514] dump_stack_lvl+0xfa/0x120 [ 2270.666540] should_fail_ex+0x4d7/0x5e0 [ 2270.666562] ? __es_insert_extent+0xed2/0x1370 [ 2270.666578] should_failslab+0xc2/0x120 [ 2270.666591] kmem_cache_alloc_noprof+0x5f/0x470 [ 2270.666613] ? __pfx___es_remove_extent+0x10/0x10 [ 2270.666627] ? do_mkdirat+0x19f/0x3d0 [ 2270.666648] ? __x64_sys_mkdir+0xf3/0x140 [ 2270.666670] __es_insert_extent+0xed2/0x1370 [ 2270.666685] ? __pfx_do_raw_write_lock+0x10/0x10 [ 2270.666707] ext4_es_insert_extent+0x4d0/0x1100 [ 2270.666727] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 2270.666745] ? lock_acquire+0xdf/0x2e0 [ 2270.666759] ? find_held_lock+0x2b/0x80 [ 2270.666776] ? ext4_es_find_extent_range+0x1cf/0x500 [ 2270.666792] ? lock_release+0xc8/0x290 [ 2270.666806] ? do_raw_read_unlock+0x44/0xe0 [ 2270.666827] ext4_ext_map_blocks+0x1797/0x5f30 [ 2270.666843] ? lock_is_held_type+0x9e/0x120 [ 2270.666867] ? bdev_getblk+0x98/0x680 [ 2270.666886] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2270.666899] ? ext4_get_group_desc+0x294/0x550 [ 2270.666916] ? map_id_range_up+0x1d5/0x350 [ 2270.666929] ? crc32c+0x1ae/0x320 [ 2270.666939] ? look_up_lock_class+0x56/0x150 [ 2270.666956] ? register_lock_class+0x41/0x560 [ 2270.666971] ? __lock_acquire+0xc65/0x1b70 [ 2270.666990] ? lock_acquire+0xdf/0x2e0 [ 2270.667001] ? ext4_map_blocks+0x4b0/0x15a0 [ 2270.667020] ext4_map_query_blocks+0x117/0x890 [ 2270.667036] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 2270.667050] ? __pfx_down_read+0x10/0x10 [ 2270.667062] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2270.667080] ext4_map_blocks+0x4c3/0x15a0 [ 2270.667097] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2270.667117] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2270.667135] ? __pfx_security_inode_init_security+0x10/0x10 [ 2270.667155] ? crc32c+0x1ae/0x320 [ 2270.667165] ? __brelse+0x7f/0xa0 [ 2270.667181] ext4_append+0x1b6/0x530 [ 2270.667200] ? __pfx_ext4_append+0x10/0x10 [ 2270.667219] ? __pfx___ext4_new_inode+0x10/0x10 [ 2270.667241] ext4_init_new_dir+0x21e/0x460 [ 2270.667255] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2270.667272] ext4_mkdir+0x3c5/0xb30 [ 2270.667287] ? __pfx_ext4_mkdir+0x10/0x10 [ 2270.667298] ? security_inode_permission+0x72/0xe0 [ 2270.667321] vfs_mkdir+0x59a/0x8d0 [ 2270.667338] do_mkdirat+0x19f/0x3d0 [ 2270.667357] ? __pfx_do_mkdirat+0x10/0x10 [ 2270.667380] __x64_sys_mkdir+0xf3/0x140 [ 2270.667398] do_syscall_64+0xbf/0x360 [ 2270.667410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2270.667433] RIP: 0033:0x7f12aea10c27 [ 2270.667443] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2270.667455] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2270.667467] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2270.667475] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2270.667482] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2270.667490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2270.667498] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2270.667515] 04:47:01 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x3000) 04:47:01 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 17) 04:47:01 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@size={'size', 0x3d, [0x65, 0x38]}}]}) 04:47:01 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, 0x0, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:47:01 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 19) 04:47:01 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x46, 0x0) 04:47:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:47:01 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x480, 0x0) [ 2281.636255] tmpfs: Bad value for 'size' 04:47:01 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer'}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) 04:47:01 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 18) 04:47:01 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x46, 0x0) 04:47:01 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x500, 0x0) 04:47:01 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:47:01 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 20) 04:47:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) [ 2281.835593] tmpfs: Bad value for 'mpol' [ 2281.850827] FAULT_INJECTION: forcing a failure. [ 2281.850827] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.852529] CPU: 0 UID: 0 PID: 25709 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2281.852561] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2281.852574] Call Trace: [ 2281.852583] [ 2281.852592] dump_stack_lvl+0xfa/0x120 [ 2281.852641] should_fail_ex+0x4d7/0x5e0 [ 2281.852690] ? __es_insert_extent+0xed2/0x1370 [ 2281.852726] should_failslab+0xc2/0x120 [ 2281.852759] kmem_cache_alloc_noprof+0x5f/0x470 [ 2281.852795] ? __pfx___es_remove_extent+0x10/0x10 [ 2281.852827] ? do_mkdirat+0x19f/0x3d0 [ 2281.852861] ? __x64_sys_mkdir+0xf3/0x140 [ 2281.852903] __es_insert_extent+0xed2/0x1370 [ 2281.852945] ? __pfx_do_raw_write_lock+0x10/0x10 [ 2281.852992] ext4_es_insert_extent+0x4d0/0x1100 [ 2281.853030] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 2281.853070] ? lock_acquire+0xdf/0x2e0 [ 2281.853101] ? find_held_lock+0x2b/0x80 [ 2281.853134] ? ext4_es_find_extent_range+0x1cf/0x500 [ 2281.853163] ? lock_release+0xc8/0x290 [ 2281.853188] ? do_raw_read_unlock+0x44/0xe0 [ 2281.853224] ext4_ext_map_blocks+0x1797/0x5f30 [ 2281.853257] ? lock_is_held_type+0x9e/0x120 [ 2281.853302] ? bdev_getblk+0x98/0x680 [ 2281.853338] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2281.853364] ? ext4_get_group_desc+0x294/0x550 [ 2281.853396] ? map_id_range_up+0x1d5/0x350 [ 2281.853421] ? crc32c+0x1ae/0x320 [ 2281.853439] ? look_up_lock_class+0x56/0x150 [ 2281.853474] ? register_lock_class+0x41/0x560 [ 2281.853503] ? __lock_acquire+0xc65/0x1b70 [ 2281.853539] ? lock_acquire+0xdf/0x2e0 [ 2281.853562] ? ext4_map_blocks+0x4b0/0x15a0 [ 2281.853597] ext4_map_query_blocks+0x117/0x890 [ 2281.853627] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 2281.853655] ? __pfx_down_read+0x10/0x10 [ 2281.853683] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2281.853733] ext4_map_blocks+0x4c3/0x15a0 [ 2281.853774] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2281.853823] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2281.853858] ? __pfx_security_inode_init_security+0x10/0x10 [ 2281.853896] ? crc32c+0x1ae/0x320 [ 2281.853922] ? __brelse+0x7f/0xa0 [ 2281.853966] ext4_append+0x1b6/0x530 [ 2281.854003] ? __pfx_ext4_append+0x10/0x10 [ 2281.854042] ? __pfx___ext4_new_inode+0x10/0x10 [ 2281.854092] ext4_init_new_dir+0x21e/0x460 [ 2281.854118] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2281.854153] ext4_mkdir+0x3c5/0xb30 [ 2281.854182] ? __pfx_ext4_mkdir+0x10/0x10 [ 2281.854205] ? security_inode_permission+0x72/0xe0 [ 2281.854250] vfs_mkdir+0x59a/0x8d0 [ 2281.854283] do_mkdirat+0x19f/0x3d0 [ 2281.854321] ? __pfx_do_mkdirat+0x10/0x10 [ 2281.854366] __x64_sys_mkdir+0xf3/0x140 [ 2281.854403] do_syscall_64+0xbf/0x360 [ 2281.854427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.854451] RIP: 0033:0x7fe071bc9c27 [ 2281.854469] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2281.854492] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2281.854515] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2281.854531] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2281.854545] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2281.854560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2281.854574] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2281.854605] [ 2281.925431] FAULT_INJECTION: forcing a failure. [ 2281.925431] name failslab, interval 1, probability 0, space 0, times 0 [ 2281.927433] CPU: 1 UID: 0 PID: 25720 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2281.927464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2281.927476] Call Trace: [ 2281.927485] [ 2281.927499] dump_stack_lvl+0xfa/0x120 [ 2281.927554] should_fail_ex+0x4d7/0x5e0 [ 2281.927590] ? ext4_find_extent+0x7f5/0xa00 [ 2281.927617] should_failslab+0xc2/0x120 [ 2281.927640] __kmalloc_noprof+0xb4/0x4c0 [ 2281.927668] ? mark_held_locks+0x49/0x80 [ 2281.927699] ext4_find_extent+0x7f5/0xa00 [ 2281.927727] ext4_ext_map_blocks+0x1cc/0x5f30 [ 2281.927760] ? lock_is_held_type+0x9e/0x120 [ 2281.927805] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2281.927840] ? lock_acquire+0xdf/0x2e0 [ 2281.927861] ? ext4_map_blocks+0x569/0x15a0 [ 2281.927900] ? down_write+0x119/0x1f0 [ 2281.927920] ? __pfx_down_write+0x10/0x10 [ 2281.927939] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2281.927973] ext4_map_blocks+0x630/0x15a0 [ 2281.928006] ? __up_read+0x197/0x750 [ 2281.928032] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2281.928059] ? __pfx___up_read+0x10/0x10 [ 2281.928086] ? lock_release+0xc8/0x290 [ 2281.928113] ? ext4_map_blocks+0x23b/0x15a0 [ 2281.928149] ext4_getblk+0x682/0x8e0 [ 2281.928178] ? __pfx_ext4_getblk+0x10/0x10 [ 2281.928213] ? crc32c+0x1ae/0x320 [ 2281.928235] ext4_bread+0x2e/0x1a0 [ 2281.928265] ext4_append+0x224/0x530 [ 2281.928299] ? __pfx_ext4_append+0x10/0x10 [ 2281.928335] ? __pfx___ext4_new_inode+0x10/0x10 [ 2281.928373] ext4_init_new_dir+0x21e/0x460 [ 2281.928398] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2281.928430] ext4_mkdir+0x3c5/0xb30 [ 2281.928458] ? __pfx_ext4_mkdir+0x10/0x10 [ 2281.928479] ? security_inode_permission+0x72/0xe0 [ 2281.928523] vfs_mkdir+0x59a/0x8d0 [ 2281.928556] do_mkdirat+0x19f/0x3d0 [ 2281.928591] ? __pfx_do_mkdirat+0x10/0x10 [ 2281.928634] __x64_sys_mkdir+0xf3/0x140 [ 2281.928668] do_syscall_64+0xbf/0x360 [ 2281.928691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.928713] RIP: 0033:0x7f12aea10c27 [ 2281.928731] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2281.928752] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2281.928774] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2281.928789] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2281.928803] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2281.928816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2281.928830] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2281.928860] 04:47:01 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer'}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) [ 2282.005929] tmpfs: Bad value for 'mpol' 04:47:13 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 19) 04:47:13 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x538, 0x0) 04:47:13 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 21) 04:47:13 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:47:13 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x46, 0x0) 04:47:13 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x8, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:47:13 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer'}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) 04:47:13 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, 0x0, &(0x7f0000000280)=[0x0, r7, r6, r6, r8, r6], 0x6}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 2294.055986] tmpfs: Bad value for 'mpol' 04:47:13 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x0]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) 04:47:13 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 22) [ 2294.129714] tmpfs: Bad value for 'mpol' [ 2294.137367] FAULT_INJECTION: forcing a failure. [ 2294.137367] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.138318] CPU: 0 UID: 0 PID: 25791 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2294.138336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.138344] Call Trace: [ 2294.138348] [ 2294.138353] dump_stack_lvl+0xfa/0x120 [ 2294.138380] should_fail_ex+0x4d7/0x5e0 [ 2294.138402] ? ext4_mb_new_blocks+0x64e/0x4570 [ 2294.138420] should_failslab+0xc2/0x120 [ 2294.138434] kmem_cache_alloc_noprof+0x5f/0x470 [ 2294.138454] ? __mark_inode_dirty+0x53b/0xd00 [ 2294.138470] ext4_mb_new_blocks+0x64e/0x4570 [ 2294.138494] ? kasan_save_track+0x14/0x30 [ 2294.138507] ? __kasan_kmalloc+0x7f/0x90 [ 2294.138520] ? trace_kmalloc+0x1f/0xb0 [ 2294.138532] ? __kmalloc_noprof+0x22b/0x4c0 [ 2294.138549] ? mark_held_locks+0x49/0x80 [ 2294.138563] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2294.138581] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2294.138606] ? ext4_inode_to_goal_block+0x323/0x430 [ 2294.138629] ext4_ext_map_blocks+0x1c55/0x5f30 [ 2294.138648] ? lock_is_held_type+0x9e/0x120 [ 2294.138674] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2294.138694] ? lock_acquire+0xdf/0x2e0 [ 2294.138707] ? ext4_map_blocks+0x569/0x15a0 [ 2294.138731] ? __pfx_down_write+0x10/0x10 [ 2294.138743] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2294.138762] ext4_map_blocks+0x630/0x15a0 [ 2294.138781] ? __up_read+0x197/0x750 [ 2294.138797] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2294.138813] ? __pfx___up_read+0x10/0x10 [ 2294.138829] ? lock_release+0xc8/0x290 [ 2294.138845] ? ext4_map_blocks+0x23b/0x15a0 [ 2294.138866] ext4_getblk+0x682/0x8e0 [ 2294.138883] ? __pfx_ext4_getblk+0x10/0x10 [ 2294.138903] ? crc32c+0x1ae/0x320 [ 2294.138917] ext4_bread+0x2e/0x1a0 [ 2294.138934] ext4_append+0x224/0x530 [ 2294.138954] ? __pfx_ext4_append+0x10/0x10 [ 2294.138975] ? __pfx___ext4_new_inode+0x10/0x10 [ 2294.138998] ext4_init_new_dir+0x21e/0x460 [ 2294.139013] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2294.139032] ext4_mkdir+0x3c5/0xb30 [ 2294.139048] ? __pfx_ext4_mkdir+0x10/0x10 [ 2294.139060] ? security_inode_permission+0x72/0xe0 [ 2294.139089] vfs_mkdir+0x59a/0x8d0 [ 2294.139111] do_mkdirat+0x19f/0x3d0 [ 2294.139132] ? __pfx_do_mkdirat+0x10/0x10 [ 2294.139157] __x64_sys_mkdir+0xf3/0x140 [ 2294.139177] do_syscall_64+0xbf/0x360 [ 2294.139191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2294.139205] RIP: 0033:0x7f12aea10c27 [ 2294.139215] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.139228] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2294.139241] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2294.139249] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2294.139257] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2294.139265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2294.139273] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2294.139291] [ 2294.206877] tmpfs: Bad value for 'mpol' 04:47:14 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x0]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) 04:47:14 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x600, 0x0) 04:47:14 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 20) 04:47:14 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x46, 0x0) 04:47:14 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 23) 04:47:14 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x0]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) 04:47:14 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) 04:47:14 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) [ 2294.273862] FAULT_INJECTION: forcing a failure. [ 2294.273862] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.274895] CPU: 0 UID: 0 PID: 25835 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2294.274911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.274919] Call Trace: [ 2294.274924] [ 2294.274928] dump_stack_lvl+0xfa/0x120 [ 2294.274955] should_fail_ex+0x4d7/0x5e0 [ 2294.274976] ? ext4_find_extent+0x7f5/0xa00 [ 2294.274989] should_failslab+0xc2/0x120 [ 2294.275003] __kmalloc_noprof+0xb4/0x4c0 [ 2294.275019] ? mark_held_locks+0x49/0x80 [ 2294.275038] ext4_find_extent+0x7f5/0xa00 [ 2294.275053] ext4_ext_map_blocks+0x1cc/0x5f30 [ 2294.275071] ? lock_is_held_type+0x9e/0x120 [ 2294.275096] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2294.275115] ? lock_acquire+0xdf/0x2e0 [ 2294.275127] ? ext4_map_blocks+0x569/0x15a0 [ 2294.275149] ? down_write+0x119/0x1f0 [ 2294.275161] ? __pfx_down_write+0x10/0x10 [ 2294.275170] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2294.275190] ext4_map_blocks+0x630/0x15a0 [ 2294.275208] ? __up_read+0x197/0x750 [ 2294.275222] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2294.275237] ? __pfx___up_read+0x10/0x10 [ 2294.275251] ? lock_release+0xc8/0x290 [ 2294.275266] ? ext4_map_blocks+0x23b/0x15a0 [ 2294.275286] ext4_getblk+0x682/0x8e0 [ 2294.275302] ? __pfx_ext4_getblk+0x10/0x10 [ 2294.275320] ? crc32c+0x1ae/0x320 [ 2294.275333] ext4_bread+0x2e/0x1a0 [ 2294.275349] ext4_append+0x224/0x530 [ 2294.275368] ? __pfx_ext4_append+0x10/0x10 [ 2294.275387] ? __pfx___ext4_new_inode+0x10/0x10 [ 2294.275408] ext4_init_new_dir+0x21e/0x460 [ 2294.275423] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2294.275440] ext4_mkdir+0x3c5/0xb30 [ 2294.275455] ? __pfx_ext4_mkdir+0x10/0x10 [ 2294.275466] ? security_inode_permission+0x72/0xe0 [ 2294.275491] vfs_mkdir+0x59a/0x8d0 [ 2294.275509] do_mkdirat+0x19f/0x3d0 [ 2294.275528] ? __pfx_do_mkdirat+0x10/0x10 [ 2294.275551] __x64_sys_mkdir+0xf3/0x140 [ 2294.275569] do_syscall_64+0xbf/0x360 [ 2294.275582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2294.275595] RIP: 0033:0x7fe071bc9c27 [ 2294.275610] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.275622] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2294.275634] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2294.275642] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2294.275649] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2294.275657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2294.275665] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2294.275691] [ 2294.310494] tmpfs: Bad value for 'mpol' 04:47:14 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 24) [ 2294.408287] FAULT_INJECTION: forcing a failure. [ 2294.408287] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.409501] CPU: 0 UID: 0 PID: 25912 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2294.409518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.409525] Call Trace: [ 2294.409530] [ 2294.409534] dump_stack_lvl+0xfa/0x120 [ 2294.409559] should_fail_ex+0x4d7/0x5e0 [ 2294.409580] ? ext4_mb_new_blocks+0x244c/0x4570 [ 2294.409597] should_failslab+0xc2/0x120 [ 2294.409615] kmem_cache_alloc_noprof+0x5f/0x470 [ 2294.409636] ext4_mb_new_blocks+0x244c/0x4570 [ 2294.409659] ? kasan_save_track+0x14/0x30 [ 2294.409671] ? __kasan_kmalloc+0x7f/0x90 [ 2294.409683] ? trace_kmalloc+0x1f/0xb0 [ 2294.409694] ? __kmalloc_noprof+0x22b/0x4c0 [ 2294.409710] ? mark_held_locks+0x49/0x80 [ 2294.409723] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2294.409740] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2294.409759] ? ext4_inode_to_goal_block+0x323/0x430 [ 2294.409780] ext4_ext_map_blocks+0x1c55/0x5f30 [ 2294.409798] ? lock_is_held_type+0x9e/0x120 [ 2294.409823] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2294.409842] ? lock_acquire+0xdf/0x2e0 [ 2294.409853] ? ext4_map_blocks+0x569/0x15a0 [ 2294.409876] ? __pfx_down_write+0x10/0x10 [ 2294.409887] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2294.409906] ext4_map_blocks+0x630/0x15a0 [ 2294.409924] ? __up_read+0x197/0x750 [ 2294.409938] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2294.409952] ? __pfx___up_read+0x10/0x10 [ 2294.409967] ? lock_release+0xc8/0x290 [ 2294.409982] ? ext4_map_blocks+0x23b/0x15a0 [ 2294.410001] ext4_getblk+0x682/0x8e0 [ 2294.410017] ? __pfx_ext4_getblk+0x10/0x10 [ 2294.410036] ? crc32c+0x1ae/0x320 [ 2294.410049] ext4_bread+0x2e/0x1a0 [ 2294.410064] ext4_append+0x224/0x530 [ 2294.410082] ? __pfx_ext4_append+0x10/0x10 [ 2294.410102] ? __pfx___ext4_new_inode+0x10/0x10 [ 2294.410123] ext4_init_new_dir+0x21e/0x460 [ 2294.410137] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2294.410154] ext4_mkdir+0x3c5/0xb30 [ 2294.410170] ? __pfx_ext4_mkdir+0x10/0x10 [ 2294.410181] ? security_inode_permission+0x72/0xe0 [ 2294.410205] vfs_mkdir+0x59a/0x8d0 [ 2294.410223] do_mkdirat+0x19f/0x3d0 [ 2294.410243] ? __pfx_do_mkdirat+0x10/0x10 [ 2294.410265] __x64_sys_mkdir+0xf3/0x140 [ 2294.410283] do_syscall_64+0xbf/0x360 [ 2294.410296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2294.410309] RIP: 0033:0x7f12aea10c27 [ 2294.410319] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.410330] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2294.410343] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2294.410351] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2294.410358] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2294.410366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2294.410374] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2294.410390] 04:47:14 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget(0x1, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:47:14 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6, 0x46, 0x0) 04:47:14 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 21) [ 2294.508080] FAULT_INJECTION: forcing a failure. [ 2294.508080] name failslab, interval 1, probability 0, space 0, times 0 [ 2294.509128] CPU: 0 UID: 0 PID: 25915 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2294.509145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.509152] Call Trace: [ 2294.509156] [ 2294.509161] dump_stack_lvl+0xfa/0x120 [ 2294.509187] should_fail_ex+0x4d7/0x5e0 [ 2294.509208] ? ext4_find_extent+0x7f5/0xa00 [ 2294.509221] should_failslab+0xc2/0x120 [ 2294.509234] __kmalloc_noprof+0xb4/0x4c0 [ 2294.509251] ? mark_held_locks+0x49/0x80 [ 2294.509268] ext4_find_extent+0x7f5/0xa00 [ 2294.509284] ext4_ext_map_blocks+0x1cc/0x5f30 [ 2294.509301] ? lock_is_held_type+0x9e/0x120 [ 2294.509326] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2294.509342] ? __lock_acquire+0xc65/0x1b70 [ 2294.509356] ? lock_acquire+0xdf/0x2e0 [ 2294.509368] ? ext4_map_blocks+0x569/0x15a0 [ 2294.509392] ? down_write+0x119/0x1f0 [ 2294.509404] ? __pfx_down_write+0x10/0x10 [ 2294.509414] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2294.509433] ext4_map_blocks+0x630/0x15a0 [ 2294.509451] ? __up_read+0x197/0x750 [ 2294.509466] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2294.509481] ? __pfx___up_read+0x10/0x10 [ 2294.509496] ? lock_release+0xc8/0x290 [ 2294.509511] ? ext4_map_blocks+0x23b/0x15a0 [ 2294.509530] ext4_getblk+0x682/0x8e0 [ 2294.509546] ? __pfx_ext4_getblk+0x10/0x10 [ 2294.509564] ? crc32c+0x1ae/0x320 [ 2294.509577] ext4_bread+0x2e/0x1a0 [ 2294.509593] ext4_append+0x224/0x530 [ 2294.509617] ? __pfx_ext4_append+0x10/0x10 [ 2294.509637] ? __pfx___ext4_new_inode+0x10/0x10 [ 2294.509658] ext4_init_new_dir+0x21e/0x460 [ 2294.509672] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2294.509689] ext4_mkdir+0x3c5/0xb30 [ 2294.509704] ? __pfx_ext4_mkdir+0x10/0x10 [ 2294.509716] ? security_inode_permission+0x72/0xe0 [ 2294.509741] vfs_mkdir+0x59a/0x8d0 [ 2294.509760] do_mkdirat+0x19f/0x3d0 [ 2294.509779] ? __pfx_do_mkdirat+0x10/0x10 [ 2294.509802] __x64_sys_mkdir+0xf3/0x140 [ 2294.509821] do_syscall_64+0xbf/0x360 [ 2294.509833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2294.509847] RIP: 0033:0x7fe071bc9c27 [ 2294.509856] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.509868] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2294.509880] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2294.509888] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2294.509896] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2294.509903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2294.509911] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2294.509928] 04:47:26 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:47:26 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7, 0x46, 0x0) 04:47:26 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x700, 0x0) 04:47:26 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) clone3(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r6 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, 0x0}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r6, r7, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:47:26 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x46000, 0x0, 0x46, 0x0) 04:47:26 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:47:26 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 25) 04:47:26 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 22) 04:47:26 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x46, 0x0) 04:47:26 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x20, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:47:26 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 26) [ 2306.559191] FAULT_INJECTION: forcing a failure. [ 2306.559191] name failslab, interval 1, probability 0, space 0, times 0 [ 2306.561289] CPU: 0 UID: 0 PID: 25983 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2306.561319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2306.561332] Call Trace: [ 2306.561339] [ 2306.561347] dump_stack_lvl+0xfa/0x120 [ 2306.561388] should_fail_ex+0x4d7/0x5e0 [ 2306.561424] ? __es_insert_extent+0xed2/0x1370 [ 2306.561449] should_failslab+0xc2/0x120 [ 2306.561471] kmem_cache_alloc_noprof+0x5f/0x470 [ 2306.561503] ? __pfx___es_remove_extent+0x10/0x10 [ 2306.561527] ? ext4_es_can_be_merged.isra.0+0x13b/0x160 [ 2306.561558] __es_insert_extent+0xed2/0x1370 [ 2306.561597] ext4_es_insert_extent+0x4d0/0x1100 [ 2306.561641] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 2306.561669] ? lock_acquire+0xdf/0x2e0 [ 2306.561692] ? ext4_map_blocks+0x569/0x15a0 [ 2306.561733] ? __pfx_down_write+0x10/0x10 [ 2306.561752] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2306.561787] ext4_map_blocks+0x815/0x15a0 [ 2306.561819] ? __up_read+0x197/0x750 [ 2306.561846] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2306.561872] ? __pfx___up_read+0x10/0x10 [ 2306.561899] ? lock_release+0xc8/0x290 [ 2306.561927] ? ext4_map_blocks+0x23b/0x15a0 [ 2306.561962] ext4_getblk+0x682/0x8e0 [ 2306.561992] ? __pfx_ext4_getblk+0x10/0x10 [ 2306.562027] ? crc32c+0x1ae/0x320 [ 2306.562049] ext4_bread+0x2e/0x1a0 [ 2306.562079] ext4_append+0x224/0x530 [ 2306.562113] ? __pfx_ext4_append+0x10/0x10 [ 2306.562148] ? __pfx___ext4_new_inode+0x10/0x10 [ 2306.562187] ext4_init_new_dir+0x21e/0x460 [ 2306.562211] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2306.562244] ext4_mkdir+0x3c5/0xb30 [ 2306.562272] ? __pfx_ext4_mkdir+0x10/0x10 [ 2306.562293] ? security_inode_permission+0x72/0xe0 [ 2306.562337] vfs_mkdir+0x59a/0x8d0 [ 2306.562370] do_mkdirat+0x19f/0x3d0 [ 2306.562404] ? __pfx_do_mkdirat+0x10/0x10 [ 2306.562447] __x64_sys_mkdir+0xf3/0x140 [ 2306.562481] do_syscall_64+0xbf/0x360 [ 2306.562504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2306.562527] RIP: 0033:0x7f12aea10c27 [ 2306.562544] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2306.562565] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2306.562587] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2306.562601] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2306.562615] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2306.562628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2306.562641] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2306.562671] 04:47:37 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:47:37 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x804, 0x0) 04:47:37 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 1) 04:47:37 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 23) 04:47:37 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x21, 0x46, 0x0) 04:47:37 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x10, 0xffffffffffffffff, 0x8000000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x32780ff6504589c9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="000078adc1d143889ab46b9ba43f0000f6872e2f66696c65de88a94f14b331421e1ab4eab50e0e13c7bbdef228a0710a7cbe23bd7b22af1a5ae7fbdc0d1042a96ed6730aa4eb05b768c9da98c1d56d4b8ed1f7c20c49d0d0b752280784359169107edf04449526d42d42736ee20d8489dec3f23ce931da0491e905b2365b1bef426434216cc55b49543b0794760b45090d005714bfd88c36757ce8d68bb1c0c80e575c20259e3a5774c6858da353a6"]) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x8010, r1, 0x8000000) syz_io_uring_complete(r2) 04:47:37 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) clone3(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r6 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, 0x0}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r6, r7, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:47:37 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 27) [ 2317.836391] FAULT_INJECTION: forcing a failure. [ 2317.836391] name failslab, interval 1, probability 0, space 0, times 0 [ 2317.838295] CPU: 1 UID: 0 PID: 26068 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2317.838329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2317.838343] Call Trace: [ 2317.838352] [ 2317.838361] dump_stack_lvl+0xfa/0x120 [ 2317.838404] should_fail_ex+0x4d7/0x5e0 [ 2317.838442] ? getname_flags.part.0+0x48/0x540 [ 2317.838470] should_failslab+0xc2/0x120 [ 2317.838493] kmem_cache_alloc_noprof+0x5f/0x470 [ 2317.838526] ? fput+0x92/0xd0 [ 2317.838551] ? ksys_write+0x1a3/0x240 [ 2317.838587] getname_flags.part.0+0x48/0x540 [ 2317.838626] __x64_sys_mkdir+0xdb/0x140 [ 2317.838663] do_syscall_64+0xbf/0x360 [ 2317.838688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2317.838713] RIP: 0033:0x7f4a67e99c27 [ 2317.838731] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2317.838754] RSP: 002b:00007f4a6540ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2317.838778] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a67e99c27 [ 2317.838794] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2317.838808] RBP: 00007f4a65410040 R08: 0000000000000000 R09: 0000000000000000 [ 2317.838823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2317.838838] R13: 0000000020000080 R14: 00007f4a65410000 R15: 0000000020000240 [ 2317.838869] 04:47:37 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 24) 04:47:37 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r1 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:47:37 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 28) 04:47:37 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb1, 0x46, 0x0) 04:47:37 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x0) 04:47:37 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xb, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) [ 2318.076316] FAULT_INJECTION: forcing a failure. [ 2318.076316] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.078351] CPU: 0 UID: 0 PID: 26158 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2318.078385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.078400] Call Trace: [ 2318.078409] [ 2318.078418] dump_stack_lvl+0xfa/0x120 [ 2318.078465] should_fail_ex+0x4d7/0x5e0 [ 2318.078506] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 2318.078548] should_failslab+0xc2/0x120 [ 2318.078573] kmem_cache_alloc_noprof+0x5f/0x470 [ 2318.078617] ? lock_is_held_type+0x9e/0x120 [ 2318.078659] jbd2_journal_add_journal_head+0x367/0x5d0 [ 2318.078704] jbd2_journal_get_create_access+0x44/0x560 [ 2318.078735] ? lock_is_held_type+0x9e/0x120 [ 2318.078776] __ext4_journal_get_create_access+0x54/0x1b0 [ 2318.078821] ext4_getblk+0x3c9/0x8e0 [ 2318.078856] ? __pfx_ext4_getblk+0x10/0x10 [ 2318.078896] ? crc32c+0x1ae/0x320 [ 2318.078921] ext4_bread+0x2e/0x1a0 [ 2318.078955] ext4_append+0x224/0x530 [ 2318.078994] ? __pfx_ext4_append+0x10/0x10 [ 2318.079036] ? __pfx___ext4_new_inode+0x10/0x10 [ 2318.079080] ext4_init_new_dir+0x21e/0x460 [ 2318.079109] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2318.079146] ext4_mkdir+0x3c5/0xb30 [ 2318.079177] ? __pfx_ext4_mkdir+0x10/0x10 [ 2318.079202] ? security_inode_permission+0x72/0xe0 [ 2318.079252] vfs_mkdir+0x59a/0x8d0 [ 2318.079289] do_mkdirat+0x19f/0x3d0 [ 2318.079330] ? __pfx_do_mkdirat+0x10/0x10 [ 2318.079378] __x64_sys_mkdir+0xf3/0x140 [ 2318.079419] do_syscall_64+0xbf/0x360 [ 2318.079445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2318.079471] RIP: 0033:0x7f12aea10c27 [ 2318.079491] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.079516] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2318.079541] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea10c27 [ 2318.079558] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2318.079573] RBP: 00007f12abf87040 R08: 0000000000000000 R09: 0000000000000000 [ 2318.079589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2318.079605] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2318.079638] [ 2318.113008] ENOMEM in journal_alloc_journal_head, retrying. 04:47:37 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 2) 04:47:38 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf5, 0x46, 0x0) 04:47:38 executing program 0: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0xfffffffffffffffc, 0x3, &(0x7f0000001340)=[{&(0x7f0000000240)="37384f015f74de09e669700e4ab89e6f54595be22f884dbf436b395f73b54081429e33dd80c804152cee069516195a24f8a7160c628b3da6dad26e4614032faee493f0be2951f988426d70992f07066ae0ec24641f0d4c3897be4e154e9c9653b86014c9455fd79cb08b0db72c53a87c7d", 0x71, 0x40}, {&(0x7f00000002c0)="a718373f46a6aec0799045ff2fd58ff9133b552a4e3bb0aa777e7af6bd81ceaff7c9502b70e4ae43081ad3a81200a6c29e85a9ace98924fbc154c698fba5332f01618c7fc9384f914c3611b7f548125a9808f740aa97126d6f0756", 0x5b, 0x3}, {&(0x7f0000000340)="c85b294149dc0c35b11547e17d2e4e02328dd26af77e2a862fe45e7a3af9ec70ee4afc7e8a182bfbdd0cb3448749d56b8abc98c9bb5cc7b7d0b1d3970d703e0041611a75ef6955c79e43ccbddb0a5218c4082bde6f3b3af9854b4094f83d5bae3b43ef126856ecb0eadbd6064c5afae10f3eb778ae4170b7d981c811409f2176d947a0ea9a9b9f70cf9268d82ddfa3a049c87d2948af7283724d6ac137241e8a2cc8cb74e696e2cb1f1648b57d206051f2c53d8ec5ab1ed605ec3c0e17ab7cd18b1607afa168c15e9a5063418223a93c85a2228eee4eef5a2c6e303807803c9025f5750967ffd1fa86dba54bb4ff19ea7f795104c9eebba512c5158eb7fb317413856ffe2a263fe306fea72917283e6cabae876bfc579a6f2912a1ee1c9ee2860c366ae574c7c80abeb0bfa4c8356c08de35b3b3ffce5dccdd18b9461e8c8085cdd99c2de0ecc14e2803ab2e31a253483aa1c35a93dbbc6be32d874e18909c3e04b597277e0df6ca61c9a27e2f7ce77af453d55bdccd285c44fb2d5fb1bc7bc1b3e4b0eeb0fd42d02bb78baf7ab1ae6b2f77b7f543f57ecff81d51ac43663e1656894abfc87b8df34b776297af3eb934a487ecc41bfca245565cbd2387ec67745421732222b5694828fe757f7b8744abd89281e79cc6cde16be788fb00d138f8d91bf5daee021835ba030ae0c4143769e3cd72f3e98eab7fb372766ba65b17512ac51f00c5427e01a4419aa487ca37879e62c120a9a1a5b9dac47f76d80ff18e981c9235af04726e173c1347b1bb248c32f5c08ee1361c8ea2ba55f2d4c996f887a86e03454c056e83d260cca0b69578c57771ae9b4ff417922782cf0e7cb01ba463e30c369f116e812a0f057d6793cecbd71f8ea6a89326aebf44dd781bedd6c5f1d1607407c80568f73fb5a98627057e4cae6b4b78b51381ff4e981fb9b1f0cd4aeca65e99bd1d13c5da2db7957e031f8268b9fb0275123e8c0c5bd40bedf5779499551b08ad8c212d62097d82cd76b30c992164926d42c9f10fb51f9dfe1ef3797c1c823b379d73d4c0b5daa37282c156443d8a60858b8224c54105e39f6331af425989cc59ca96fb27f48b07ac0a166754e5abe31984eee150b250039cc29ea51262886a0040093e050299824c7631baaa81849f5f9edc47741bc7ed4b4982a8ff278db230a36947060af1eeb41572d9ad37f101f11834986018c7d22aa9fd35769bd5da33fb1639519af74ce95bca2bcfdf64d00e3b8022182ba460eda00435bd93566eb252d66d630c12e423cc0c79a4d12fd1d4a51e213e5e42290bf4df1b7a8e580cc6dd162d2d803b7202ec9190a480821b05a04b9a14f3bd53d483b8b6a9e6c7f2ccd6dce00b3bd7bc86e1494df075224365f2874e8d14c5f944805b63fa4a1fa76299f955a08a67cd092e96aa6ec012010b30bac581031b18b9c80c0b160cb91753d103e4bb7480be1744ea1e735e552c11b026531fafe0f37b012b898a769a142b42826360cc3a95af7554208cae29564b6c27923a06d4d27a2592279598839dd51aa2e6283930ff562f17f59ce9b63832e316e0b2ad65083fdedb92da727a7002955acf3de7e3fe59c80cbe551f3c7a940ebf95b029aae9db81775c607fe4d63f2677946acae6c8ed2096c5c39ec973fd550d2c5f38d6a8dcab747a7cea1d343f57787eeedf14d8a1d16c51c915dd4c24580599fc3cfcec8ea64f759dda1f938987cb5a9f915a51229f5bd8444f8f5b197b9520be8357c5934bd21aad647deb49cde9c704369bedffc3cd09ce46c2d4bae49848edbf4319bdd7788251cd59cf1f1ef594f238999a1cd84a74c5110f2e2a925e0f4090806db48fd984738f6603b832dd895d9d31ae692e0dc5abee090857f5339219806939b3a2eed13c0fea61f3bf40e74714a947553b7cd6651ff90928573e67282d1ccf6388de594e25b51003c9df3ed53eb4121256462f77855594f4f177aa818deb7fc1f86e1e21de8a3dbb9e4cc59849abf65f0d3c22dee51e44741b6decaf31b732126fc995ed5151fa16669c133650268abe4e8421b26eeb0e4c73f0d996b5b13f819f06e3ec9ff011473a925634f389e54858d11f5501ab2dce0aa9e48643f148f127d5186c9bbe42aeefe9f92dd0677a919fc577ecdc36519167ef28254760a6e2dede4797275288b2d111c6c8293246054f671c02d3e85f706ab80988b08c6d1ed48ff45b8c04dc0406736a4b184d064efddcc9fa96d2cbf540816a9e2396762fc5910810cb956ba1504ad31d804e7367494d5d914e11f591ae84c1eb632d6310614792e31e374ddb2c3cfadca8eb34144ea652b7a451c7c02a1dfeedb5312f133ee0d0a6129a81d67754d776bb229af41618fbcc4b34d6a9e33087cb6d1c261cf134d1ba6283f35e16029525df310e612964657ea38984dd2d474fc19c5966699ae05e932cdeeea4a7432dc179b40b088d5d5b03291a851f07d04280dedc6567c0b5329e3ad8ea53459e14ae6d0cde6887ec99b7350ebb97bb1b483103794425051a4161091175a909e5dd083a1f01784f2fa85c757476e1b76b0d02c515c1ec55c505f7226772e63bc4589ae201ae0d79acd344eae71d579a2731eda2dde15221188a2e78811b99df0786a139109539fcce604ed2a050503a99389360990b4ae0cc9e2aeb1e3013864277fa84fd493c5ad50ca4f24c62df393b7c8b5c16a0c3eed21ae11ea70af99eb37a9b1f639b5e21048cbeaf1af176090a6e58e0f4d63de2e7540ab6ac2895eaca789c75b4716198c899f1b36bac4b9c7e2bc342af94974083b38a34b48d4ebc6b1c8e75ae6cbcb0c957e4e9c0d3df1c51c4bbacf8760376ab7f398d66d5236ccc698c2bd53c72a3e29418bd7e4c06c1314d45659f1e4e311dd9ea0930252234cf5299588e3893aa26ccb04d185ee999e27c93b979a0a07e321c474d86bcb1740da0018baa5d1abe741b06a34f357c901f4b9b8c2af3d5e292186e032c950c40945501551c6e801799046764ca128389082ccd01e0f27417436687a15b522261006162c6a79e5bb2fdcf72134a8e9acc90ca2886f21c1ecb4f3098a9ce516952a48694d963659da0b7cdb0b4ea9d4a7b09529d32959261ef291457541bbc42c1dd27eea6535c1f8a4079a31bab3dd61aabb6dbc9d9c4d2a82babb8280047d887975ad4af77c3e23d933b57dcfb74b76bbb58d2c0a4c2ab9c806f6a7f6a964a34f3c77fdd47ed8d1c7178ca6e630fb854f398d6a952f22ea6749cf69bb1dc630857572c77740148b3969b7c748e0d526a8490eef3bef8d27309baf88f3bbd052cc7a3f548c5812efed9354561d2a6c382b68d7fdef1121dd0f01355de8da37b1aa4cdb8a86a937ac17b4a4e7dbec4512889c6597b9a42739a59fb0e79da741b69661066ec035841a4bfa0dbfc173c098d6e0226778893f421b7f4f1d98531ca5f252bad2935ff95ca9f941b80c626ec9084922972bab586b62be64531d0847c5101aa8baec7cf8f2f5078e7f7a46bf6dbfa718787b29d3cec286a64c14cbfc41992a63bd913161fa8b5cf9e058ae081130423b7ea4f3bb2b557755affe6f4136be55678365c03e3b0293f1e8470e1a055a24ca773b484d074707c2e7796f9f983cc8f0d8a1ab38af74065506247fc79e1331a9adb0b0b41cc6621cf3001dccabd8712069c607ba89bcbeea3b9621ad956f18250eebec9f7da7d13c3ab36f51290eb43b9541b63b5ff6409d1d32b9365ad68ea3357c6b9c5989a65537ea2e1f8217a231ee7b32ded9a66094827d7c40dfee5facae08da3d674c006ed62b8c9b0172d708ed1d5a251683cbe97410e01c2e9aac1b7d81c0ae227e30e974816d36781e586e745e03bcc20ba934a1043530d847eceab6ba03be6d396d8194249c6ccf63d5c372f260d4f39bb9b7daf50e68c54e4ba2c2df532e26ed94e786c57f433259a99fc1a4feddc6a820829459c30701cbd83880ec9bdf30dc580933940b3a37d7c90f2facfd30e10ee1498dab46d13a539a759e74eed5cb6a3f98e51a91f84113b07c9119fed49d408befdcba5b847851659d3ab5e0c17290b366d0e50ad4ecd1e706098dc4be56952488227baef490628c1ec0b464a0a2a9c5aa482b08f9bbd049461a7580f6c5c3317dae28cf44b7cb26916dde085a1f7545f9883e4dcf1d5a2db428f61bba2b0aa0568bf087b4b67a4ad4e80e3f372427c919d25e58a1c67b76269226c97cc5e71328b550c68fcf0473e01818854d5251bc90c25845fbc7495e5baafc4e2dfa67372d4317f53543bf963d4bfc21a2f072ead7402e11a45b17f92e3612d8afc8102f4ce3f934384b7b7c30bb6cfd6a30750c839f9c9198171c7483150dd58ed4385ac7838a5378f9dee0418a4980cc0377a52d5e49a7987a54b74816dfd6e95118541fe19312a338834f2f2194c51a2a14962bde4c0b8232ddc8f8f2fae42bc41692abadef0f003f119c6e4141cacc056e581bf1920b4721696364c07bfd1414a90edbceb7f2970cfd79e706db39adcd37d0348dbbe56b2d38fb805775889216de5f819fb9ebe33e258f3c90158599620c46eb09eb51b0b36ab5e0169e399f3d74b4d65c8b84a378452eaba30db312f66c4c5b02e37048a77146626b5af76ee3c2e63f0e3e9925ea26e5fc548529a57a0ac61d48cfa306a82ab8835aa6214836bc5c6ee8304a304f072376a006c10b2e090993ce512fac56a3d9f09ecf29bf65e9a9ad87d4dd79e004072b4d18bc32b831c9fefc2fe712ecdfa26333fb2e7457bd2f80226ca26ce6b6078a2769fdfdc6f5ffead550d654fcd22310c410628bb25a973a85a1430d5e1b0649d58eda14f81c1fc64fb91936d7f810bc1b4e82bbcae6a7d5c74863459abbef01d9bf51c87e4441e3e660b043aacd7a1b0105bfc6fe4917bceed9406dbc82c6363648370b22da3520669a9ed8b5253b88ba54c3ec2e86846956b8eff2234f8986a48b3edc39032f0d0155754073b19b492133f478d637d9ea83d2283813ce02a44073a506d439cc7e7d5c0da67007db1ee2603f54b01a51520dd0846980e2ffa08189dd55700fd62ebd40d200bbb53db59d698386f24121cef494d0feb0ca93f209240c7c01227a7bf5cdc094b33e5fb2178b46b6a9ef5f0d06f1553ad2830cfe6f55ae1ef742847fbe34110d84dfd43dad0019c61df632e3e4199921c07912de8dc17a9300bede36c717496a19c2ae1b57ab0dae4d52e3a35093221315c839ab059c0a86337014062f6ee0ddaa5203f5d1b098b2d0d25423870903e8c6f9fc9bafc62fe9db9474e5f8ea6b733b757bb9212a640b11b585d30f659acdea51837cda7520d94a86a285fb5200015b86a44a0291af538537defdb4f3fc824dfda892145ad1b1a0b67c6796693d55611f5e5a29c905cbd533bb5c38593f4bdc0f447b2478099150f6f56b4d6f9147d446d3163ecb190aca24d622ba41e44a45da60e0b3408c79f33eac34a274ed786ff73d0f4cf082f04ef75188aa9ef3babba92aa4374130b0c16ffca7dcb9f7fd558b16679480add4db43a17caff8745014a84684446e1b47cf279a013503b5ffc5aa69a1ada770e07cba6c660b9481296e20fdeb3413edc5e00751efc347b60ee2c83b6d962410624353004672d1dbc793a1dc3b6fcfbe6fa8d0cd39845d6e00cafa0ac0bc0251d23472cefa974bf7b99e41cf51480b3f6c27318bc59c28ac72c60b1d9ecb6d30ebcff26c69de6e979acd3a887e09545a2d97c71bc55e7547a74fc818a9a7c421c00ab8736b30d6d6f9d8274594a260d438960", 0x1000, 0x6c69a3b}], 0x150488, &(0x7f00000013c0)={[{@map_off}, {@gid}, {@nocompress}], [{@euid_gt={'euid>', r0}}, {@subj_role={'subj_role', 0x3d, 'eth\x00'}}]}) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xfc, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "6066b816e61cd56c840154fa44bb52f71d0aa0ac52119a872606da"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "d53831140c4f0ecce9e91eedd23b919e2a58dcb45e996fe8d7db0a8d2f54"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x40000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:47:38 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) clone3(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r6 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, 0x0}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r6, r7, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 2318.205195] tmpfs: Bad value for 'size' 04:47:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 25) 04:47:50 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 29) 04:47:50 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 3) 04:47:50 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, r8], 0x5}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:47:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 26) 04:47:50 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x3805, 0x0) 04:47:50 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x300, 0x46, 0x0) 04:47:50 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x2000) r1 = shmget$private(0x0, 0xa000, 0x800, &(0x7f0000ff6000/0xa000)=nil) shmat(r1, &(0x7f0000ff1000/0xd000)=nil, 0x1000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmat(r1, &(0x7f0000ff3000/0x4000)=nil, 0x2000) 04:47:50 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) [ 2330.361697] FAULT_INJECTION: forcing a failure. [ 2330.361697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2330.364016] CPU: 0 UID: 0 PID: 26303 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2330.364070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2330.364087] Call Trace: [ 2330.364096] [ 2330.364107] dump_stack_lvl+0xfa/0x120 [ 2330.364159] should_fail_ex+0x4d7/0x5e0 [ 2330.364205] strncpy_from_user+0x3b/0x2f0 [ 2330.364242] getname_flags.part.0+0x8d/0x540 [ 2330.364281] __x64_sys_mkdir+0xdb/0x140 [ 2330.364327] do_syscall_64+0xbf/0x360 [ 2330.364355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2330.364385] RIP: 0033:0x7f4a67e99c27 [ 2330.364407] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.364436] RSP: 002b:00007f4a6540ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2330.364464] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a67e99c27 [ 2330.364483] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2330.364501] RBP: 00007f4a65410040 R08: 0000000000000000 R09: 0000000000000000 [ 2330.364518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2330.364536] R13: 0000000020000080 R14: 00007f4a65410000 R15: 0000000020000240 [ 2330.364573] 04:47:50 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0) 04:47:50 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x78000000, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:48:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x18, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:01 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 27) 04:48:01 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0) 04:48:01 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmctl$IPC_RMID(r0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x6000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:48:01 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x500, 0x46, 0x0) 04:48:01 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 4) 04:48:01 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 30) 04:48:01 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6], 0x4}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) [ 2341.566008] FAULT_INJECTION: forcing a failure. [ 2341.566008] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.566962] CPU: 1 UID: 0 PID: 26336 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2341.566979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.566987] Call Trace: [ 2341.566991] [ 2341.566996] dump_stack_lvl+0xfa/0x120 [ 2341.567021] should_fail_ex+0x4d7/0x5e0 [ 2341.567042] should_failslab+0xc2/0x120 [ 2341.567055] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 2341.567072] ? lock_release+0xc8/0x290 [ 2341.567086] ? __d_alloc+0x31/0xa10 [ 2341.567100] __d_alloc+0x31/0xa10 [ 2341.567113] d_alloc+0x4a/0x1e0 [ 2341.567125] lookup_one_qstr_excl+0x174/0x270 [ 2341.567139] ? mnt_want_write+0x153/0x420 [ 2341.567155] filename_create+0x1ca/0x480 [ 2341.567171] ? __pfx_filename_create+0x10/0x10 [ 2341.567186] ? __virt_addr_valid+0x2e8/0x5d0 [ 2341.567210] do_mkdirat+0x9a/0x3d0 [ 2341.567228] ? __pfx_do_mkdirat+0x10/0x10 [ 2341.567251] __x64_sys_mkdir+0xf3/0x140 [ 2341.567269] do_syscall_64+0xbf/0x360 [ 2341.567282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2341.567295] RIP: 0033:0x7f4a67e99c27 [ 2341.567305] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.567317] RSP: 002b:00007f4a6540ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2341.567328] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a67e99c27 [ 2341.567336] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2341.567344] RBP: 00007f4a65410040 R08: 0000000000000000 R09: 0000000000000000 [ 2341.567351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2341.567358] R13: 0000000020000080 R14: 00007f4a65410000 R15: 0000000020000240 [ 2341.567374] 04:48:01 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 28) 04:48:01 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 5) 04:48:01 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x14) 04:48:01 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x19, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) [ 2341.661546] FAULT_INJECTION: forcing a failure. [ 2341.661546] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.662631] CPU: 1 UID: 0 PID: 26350 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2341.662652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.662660] Call Trace: [ 2341.662665] [ 2341.662670] dump_stack_lvl+0xfa/0x120 [ 2341.662695] should_fail_ex+0x4d7/0x5e0 [ 2341.662715] should_failslab+0xc2/0x120 [ 2341.662728] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 2341.662745] ? lock_release+0xc8/0x290 [ 2341.662758] ? __d_alloc+0x31/0xa10 [ 2341.662772] __d_alloc+0x31/0xa10 [ 2341.662784] d_alloc+0x4a/0x1e0 [ 2341.662796] lookup_one_qstr_excl+0x174/0x270 [ 2341.662809] ? mnt_want_write+0x153/0x420 [ 2341.662825] filename_create+0x1ca/0x480 [ 2341.662841] ? __pfx_filename_create+0x10/0x10 [ 2341.662855] ? __virt_addr_valid+0x2e8/0x5d0 [ 2341.662879] do_mkdirat+0x9a/0x3d0 [ 2341.662897] ? __pfx_do_mkdirat+0x10/0x10 [ 2341.662919] __x64_sys_mkdir+0xf3/0x140 [ 2341.662937] do_syscall_64+0xbf/0x360 [ 2341.662949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2341.662962] RIP: 0033:0x7f4a67e99c27 [ 2341.662971] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.662982] RSP: 002b:00007f4a6540ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2341.662993] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a67e99c27 [ 2341.663000] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2341.663007] RBP: 00007f4a65410040 R08: 0000000000000000 R09: 0000000000000000 [ 2341.663014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2341.663021] R13: 0000000020000080 R14: 00007f4a65410000 R15: 0000000020000240 [ 2341.663036] [ 2341.663208] FAULT_INJECTION: forcing a failure. [ 2341.663208] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.679733] CPU: 1 UID: 0 PID: 26349 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2341.679750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.679756] Call Trace: [ 2341.679761] [ 2341.679765] dump_stack_lvl+0xfa/0x120 [ 2341.679784] should_fail_ex+0x4d7/0x5e0 [ 2341.679802] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 2341.679821] should_failslab+0xc2/0x120 [ 2341.679834] kmem_cache_alloc_noprof+0x5f/0x470 [ 2341.679852] ? lock_is_held_type+0x9e/0x120 [ 2341.679873] jbd2_journal_add_journal_head+0x367/0x5d0 [ 2341.679896] jbd2_journal_get_create_access+0x44/0x560 [ 2341.679913] ? lock_is_held_type+0x9e/0x120 [ 2341.679933] __ext4_journal_get_create_access+0x54/0x1b0 [ 2341.679956] ext4_getblk+0x3c9/0x8e0 [ 2341.679975] ? __pfx_ext4_getblk+0x10/0x10 [ 2341.679995] ? crc32c+0x1ae/0x320 [ 2341.680010] ext4_bread+0x2e/0x1a0 [ 2341.680027] ext4_append+0x224/0x530 [ 2341.680047] ? __pfx_ext4_append+0x10/0x10 [ 2341.680068] ? __pfx___ext4_new_inode+0x10/0x10 [ 2341.680091] ext4_init_new_dir+0x21e/0x460 [ 2341.680106] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2341.680125] ext4_mkdir+0x3c5/0xb30 [ 2341.680141] ? __pfx_ext4_mkdir+0x10/0x10 [ 2341.680153] ? security_inode_permission+0x72/0xe0 [ 2341.680194] vfs_mkdir+0x59a/0x8d0 [ 2341.680212] do_mkdirat+0x19f/0x3d0 [ 2341.680232] ? __pfx_do_mkdirat+0x10/0x10 [ 2341.680257] __x64_sys_mkdir+0xf3/0x140 [ 2341.680276] do_syscall_64+0xbf/0x360 [ 2341.680289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2341.680301] RIP: 0033:0x7fe071bc9c27 [ 2341.680311] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.680323] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2341.680335] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bc9c27 [ 2341.680343] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2341.680350] RBP: 00007fe06f140040 R08: 0000000000000000 R09: 0000000000000000 [ 2341.680357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2341.680363] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2341.680379] [ 2341.680384] ENOMEM in journal_alloc_journal_head, retrying. 04:48:01 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x6600, 0x0) 04:48:01 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 31) 04:48:01 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x600, 0x46, 0x0) 04:48:01 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 6) [ 2341.984435] FAULT_INJECTION: forcing a failure. [ 2341.984435] name failslab, interval 1, probability 0, space 0, times 0 [ 2341.986323] CPU: 1 UID: 0 PID: 26465 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2341.986354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2341.986367] Call Trace: [ 2341.986375] [ 2341.986383] dump_stack_lvl+0xfa/0x120 [ 2341.986424] should_fail_ex+0x4d7/0x5e0 [ 2341.986460] should_failslab+0xc2/0x120 [ 2341.986482] kmem_cache_alloc_lru_noprof+0x73/0x460 [ 2341.986515] ? ext4_alloc_inode+0x28/0x600 [ 2341.986551] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 2341.986587] ext4_alloc_inode+0x28/0x600 [ 2341.986629] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 2341.986667] alloc_inode+0x67/0x250 [ 2341.986693] new_inode+0x1e/0x160 [ 2341.986719] __ext4_new_inode+0x35a/0x4b90 [ 2341.986753] ? lock_release+0xc8/0x290 [ 2341.986780] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2341.986806] ? __dquot_initialize+0x29d/0xcf0 [ 2341.986830] ? __pfx___ext4_new_inode+0x10/0x10 [ 2341.986866] ? __pfx_avc_has_perm+0x10/0x10 [ 2341.986889] ? __pfx___dquot_initialize+0x10/0x10 [ 2341.986923] ext4_mkdir+0x331/0xb30 [ 2341.986955] ? __pfx_ext4_mkdir+0x10/0x10 [ 2341.986976] ? security_inode_permission+0x72/0xe0 [ 2341.987019] vfs_mkdir+0x59a/0x8d0 [ 2341.987051] do_mkdirat+0x19f/0x3d0 [ 2341.987086] ? __pfx_do_mkdirat+0x10/0x10 [ 2341.987130] __x64_sys_mkdir+0xf3/0x140 [ 2341.987164] do_syscall_64+0xbf/0x360 [ 2341.987187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2341.987209] RIP: 0033:0x7f4a67e99c27 [ 2341.987227] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2341.987248] RSP: 002b:00007f4a6540ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2341.987269] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a67e99c27 [ 2341.987283] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2341.987296] RBP: 00007f4a65410040 R08: 0000000000000000 R09: 0000000000000000 [ 2341.987309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2341.987322] R13: 0000000020000080 R14: 00007f4a65410000 R15: 0000000020000240 [ 2341.987352] 04:48:11 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 7) 04:48:11 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 32) 04:48:11 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6], 0x4}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:48:11 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:11 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 29) 04:48:11 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:48:11 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x700, 0x46, 0x0) 04:48:11 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x8004, 0x0) [ 2351.236017] FAULT_INJECTION: forcing a failure. [ 2351.236017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2351.237068] CPU: 1 UID: 0 PID: 26472 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2351.237084] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.237092] Call Trace: [ 2351.237097] [ 2351.237102] dump_stack_lvl+0xfa/0x120 [ 2351.237127] should_fail_ex+0x4d7/0x5e0 [ 2351.237148] _copy_from_user+0x30/0xd0 [ 2351.237163] memdup_user+0x7e/0xe0 [ 2351.237182] strndup_user+0x78/0xe0 [ 2351.237200] __x64_sys_mount+0x136/0x300 [ 2351.237212] ? __pfx___x64_sys_mount+0x10/0x10 [ 2351.237228] do_syscall_64+0xbf/0x360 [ 2351.237240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2351.237253] RIP: 0033:0x7f12aea1304a [ 2351.237263] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.237274] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2351.237286] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea1304a [ 2351.237293] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2351.237301] RBP: 00007f12abf87040 R08: 00007f12abf87040 R09: 0000000020000000 [ 2351.237308] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2351.237315] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2351.237331] 04:48:11 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 04:48:11 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 33) [ 2351.325513] tmpfs: Bad value for 'size' [ 2351.337184] FAULT_INJECTION: forcing a failure. [ 2351.337184] name failslab, interval 1, probability 0, space 0, times 0 04:48:11 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 30) [ 2351.338088] CPU: 1 UID: 0 PID: 26491 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2351.338104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.338112] Call Trace: [ 2351.338116] [ 2351.338121] dump_stack_lvl+0xfa/0x120 [ 2351.338145] should_fail_ex+0x4d7/0x5e0 [ 2351.338166] should_failslab+0xc2/0x120 [ 2351.338179] __kmalloc_cache_noprof+0x73/0x4a0 [ 2351.338194] ? __might_fault+0xe0/0x190 [ 2351.338208] ? copy_mount_options+0x55/0x180 [ 2351.338224] ? copy_mount_options+0x55/0x180 [ 2351.338236] ? memdup_user+0x95/0xe0 [ 2351.338252] copy_mount_options+0x55/0x180 [ 2351.338266] __x64_sys_mount+0x1ab/0x300 [ 2351.338277] ? __pfx___x64_sys_mount+0x10/0x10 [ 2351.338293] do_syscall_64+0xbf/0x360 [ 2351.338306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2351.338319] RIP: 0033:0x7f12aea1304a [ 2351.338328] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.338340] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2351.338352] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea1304a [ 2351.338360] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2351.338367] RBP: 00007f12abf87040 R08: 00007f12abf87040 R09: 0000000020000000 [ 2351.338375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2351.338382] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2351.338397] 04:48:11 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x810, 0x46, 0x0) 04:48:11 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 34) 04:48:11 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x30000, 0x0) 04:48:11 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 8) 04:48:11 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0xc49eb69ebeaa8f3a) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) shmat(r0, &(0x7f0000ff5000/0xb000)=nil, 0x7000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:48:11 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4c, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:11 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 31) [ 2351.559225] FAULT_INJECTION: forcing a failure. [ 2351.559225] name failslab, interval 1, probability 0, space 0, times 0 [ 2351.561147] CPU: 0 UID: 0 PID: 26608 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2351.561178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.561192] Call Trace: [ 2351.561200] [ 2351.561208] dump_stack_lvl+0xfa/0x120 [ 2351.561250] should_fail_ex+0x4d7/0x5e0 [ 2351.561288] ? security_inode_alloc+0x3e/0x130 [ 2351.561322] should_failslab+0xc2/0x120 [ 2351.561344] kmem_cache_alloc_noprof+0x5f/0x470 [ 2351.561376] ? lockdep_init_map_type+0x4b/0x240 [ 2351.561408] security_inode_alloc+0x3e/0x130 [ 2351.561442] inode_init_always_gfp+0xc94/0xff0 [ 2351.561481] alloc_inode+0x8d/0x250 [ 2351.561505] new_inode+0x1e/0x160 [ 2351.561531] __ext4_new_inode+0x35a/0x4b90 [ 2351.561568] ? lock_release+0xc8/0x290 [ 2351.561594] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2351.561628] ? __dquot_initialize+0x29d/0xcf0 [ 2351.561653] ? __pfx___ext4_new_inode+0x10/0x10 [ 2351.561687] ? __pfx_avc_has_perm+0x10/0x10 [ 2351.561709] ? __pfx___dquot_initialize+0x10/0x10 [ 2351.561743] ext4_mkdir+0x331/0xb30 [ 2351.561776] ? __pfx_ext4_mkdir+0x10/0x10 [ 2351.561797] ? security_inode_permission+0x72/0xe0 [ 2351.561839] vfs_mkdir+0x59a/0x8d0 [ 2351.561871] do_mkdirat+0x19f/0x3d0 [ 2351.561906] ? __pfx_do_mkdirat+0x10/0x10 [ 2351.561948] __x64_sys_mkdir+0xf3/0x140 [ 2351.561982] do_syscall_64+0xbf/0x360 [ 2351.562005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2351.562027] RIP: 0033:0x7f4a67e99c27 [ 2351.562044] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.562065] RSP: 002b:00007f4a6540ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2351.562086] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a67e99c27 [ 2351.562101] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2351.562114] RBP: 00007f4a65410040 R08: 0000000000000000 R09: 0000000000000000 [ 2351.562128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2351.562141] R13: 0000000020000080 R14: 00007f4a65410000 R15: 0000000020000240 [ 2351.562171] 04:48:11 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1008, 0x46, 0x0) 04:48:11 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 35) 04:48:11 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6], 0x4}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:48:11 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 32) 04:48:11 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x66, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:11 executing program 0: shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r0 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c) [ 2351.714236] FAULT_INJECTION: forcing a failure. [ 2351.714236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2351.716086] CPU: 0 UID: 0 PID: 26620 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2351.716117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.716132] Call Trace: [ 2351.716139] [ 2351.716147] dump_stack_lvl+0xfa/0x120 [ 2351.716186] should_fail_ex+0x4d7/0x5e0 [ 2351.716239] _copy_from_user+0x30/0xd0 [ 2351.716277] memdup_user+0x7e/0xe0 [ 2351.716326] strndup_user+0x78/0xe0 [ 2351.716359] __x64_sys_mount+0x136/0x300 [ 2351.716381] ? __pfx___x64_sys_mount+0x10/0x10 [ 2351.716411] do_syscall_64+0xbf/0x360 [ 2351.716433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2351.716456] RIP: 0033:0x7fe071bcc04a [ 2351.716473] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.716494] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2351.716516] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bcc04a [ 2351.716531] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2351.716545] RBP: 00007fe06f140040 R08: 00007fe06f140040 R09: 0000000020000000 [ 2351.716560] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2351.716573] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2351.716610] [ 2351.746610] FAULT_INJECTION: forcing a failure. [ 2351.746610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2351.748571] CPU: 0 UID: 0 PID: 26615 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2351.748609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2351.748622] Call Trace: [ 2351.748629] [ 2351.748639] dump_stack_lvl+0xfa/0x120 [ 2351.748676] should_fail_ex+0x4d7/0x5e0 [ 2351.748710] _copy_from_user+0x30/0xd0 [ 2351.748735] copy_mount_options+0x76/0x180 [ 2351.748763] __x64_sys_mount+0x1ab/0x300 [ 2351.748784] ? __pfx___x64_sys_mount+0x10/0x10 [ 2351.748813] do_syscall_64+0xbf/0x360 [ 2351.748835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2351.748858] RIP: 0033:0x7f12aea1304a [ 2351.748874] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2351.748896] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2351.748918] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea1304a [ 2351.748932] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2351.748946] RBP: 00007f12abf87040 R08: 00007f12abf87040 R09: 0000000020000000 [ 2351.748960] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2351.748974] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2351.749002] 04:48:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:21 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, 0x0], 0x5}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:48:21 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x40000, 0x0) 04:48:21 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2100, 0x46, 0x0) 04:48:21 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 36) 04:48:21 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) 04:48:21 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 33) 04:48:21 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 9) [ 2361.844340] tmpfs: Bad value for 'size' 04:48:21 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 10) [ 2361.876525] FAULT_INJECTION: forcing a failure. [ 2361.876525] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.878726] CPU: 1 UID: 0 PID: 26739 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2361.878760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2361.878773] Call Trace: [ 2361.878781] [ 2361.878790] dump_stack_lvl+0xfa/0x120 [ 2361.878834] should_fail_ex+0x4d7/0x5e0 [ 2361.878873] should_failslab+0xc2/0x120 [ 2361.878896] __kmalloc_cache_noprof+0x73/0x4a0 [ 2361.878927] ? __might_fault+0xe0/0x190 [ 2361.878953] ? copy_mount_options+0x55/0x180 [ 2361.878984] ? copy_mount_options+0x55/0x180 [ 2361.879007] ? memdup_user+0x95/0xe0 [ 2361.879040] copy_mount_options+0x55/0x180 [ 2361.879068] __x64_sys_mount+0x1ab/0x300 [ 2361.879090] ? __pfx___x64_sys_mount+0x10/0x10 [ 2361.879122] do_syscall_64+0xbf/0x360 [ 2361.879146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2361.879170] RIP: 0033:0x7fe071bcc04a [ 2361.879187] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.879211] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2361.879234] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bcc04a [ 2361.879250] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2361.879264] RBP: 00007fe06f140040 R08: 00007fe06f140040 R09: 0000000020000000 [ 2361.879279] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2361.879294] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2361.879324] [ 2361.906266] tmpfs: Bad value for 'size' 04:48:21 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x23a6, 0x46, 0x0) 04:48:21 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x480, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:21 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 11) 04:48:21 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 34) 04:48:21 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x80000, 0x0) [ 2361.989443] FAULT_INJECTION: forcing a failure. [ 2361.989443] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.991340] CPU: 1 UID: 0 PID: 26767 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2361.991372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2361.991385] Call Trace: [ 2361.991393] [ 2361.991402] dump_stack_lvl+0xfa/0x120 [ 2361.991445] should_fail_ex+0x4d7/0x5e0 [ 2361.991482] ? getname_flags.part.0+0x48/0x540 [ 2361.991510] should_failslab+0xc2/0x120 [ 2361.991533] kmem_cache_alloc_noprof+0x5f/0x470 [ 2361.991573] getname_flags.part.0+0x48/0x540 [ 2361.991610] getname_flags+0x95/0xe0 [ 2361.991643] user_path_at+0x27/0x90 [ 2361.991677] __x64_sys_mount+0x1e9/0x300 [ 2361.991700] ? __pfx___x64_sys_mount+0x10/0x10 [ 2361.991731] do_syscall_64+0xbf/0x360 [ 2361.991755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2361.991779] RIP: 0033:0x7f12aea1304a [ 2361.991797] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.991820] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2361.991843] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea1304a [ 2361.991859] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2361.991874] RBP: 00007f12abf87040 R08: 00007f12abf87040 R09: 0000000020000000 [ 2361.991889] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2361.991903] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2361.991934] [ 2362.061396] tmpfs: Bad value for 'size' 04:48:34 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa623, 0x46, 0x0) 04:48:34 executing program 0: fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)={'L+', 0x7}, 0x16, 0x2) r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) 04:48:34 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:34 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, 0x0], 0x5}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:48:34 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 35) 04:48:34 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x100000, 0x0) 04:48:34 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 37) 04:48:34 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 12) [ 2374.418356] FAULT_INJECTION: forcing a failure. [ 2374.418356] name failslab, interval 1, probability 0, space 0, times 0 [ 2374.419977] CPU: 0 UID: 0 PID: 26876 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2374.420004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2374.420017] Call Trace: [ 2374.420024] [ 2374.420031] dump_stack_lvl+0xfa/0x120 [ 2374.420070] should_fail_ex+0x4d7/0x5e0 [ 2374.420103] ? security_inode_init_security+0x13d/0x390 [ 2374.420131] should_failslab+0xc2/0x120 [ 2374.420151] __kmalloc_noprof+0xb4/0x4c0 [ 2374.420177] ? posix_acl_create.part.0+0x2a0/0x480 [ 2374.420212] security_inode_init_security+0x13d/0x390 [ 2374.420240] ? __pfx_ext4_initxattrs+0x10/0x10 [ 2374.420262] ? __pfx_security_inode_init_security+0x10/0x10 [ 2374.420293] ? crc32c+0x1ae/0x320 [ 2374.420314] __ext4_new_inode+0x3378/0x4b90 [ 2374.420357] ? __pfx___ext4_new_inode+0x10/0x10 [ 2374.420390] ? __pfx___dquot_initialize+0x10/0x10 [ 2374.420422] ext4_mkdir+0x331/0xb30 [ 2374.420451] ? __pfx_ext4_mkdir+0x10/0x10 [ 2374.420471] ? security_inode_permission+0x72/0xe0 [ 2374.420510] vfs_mkdir+0x59a/0x8d0 [ 2374.420555] do_mkdirat+0x19f/0x3d0 [ 2374.420588] ? __pfx_do_mkdirat+0x10/0x10 [ 2374.420632] __x64_sys_mkdir+0xf3/0x140 [ 2374.420664] do_syscall_64+0xbf/0x360 [ 2374.420685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2374.420707] RIP: 0033:0x7f4a67e99c27 [ 2374.420722] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2374.420742] RSP: 002b:00007f4a6540ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2374.420762] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a67e99c27 [ 2374.420776] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2374.420788] RBP: 00007f4a65410040 R08: 0000000000000000 R09: 0000000000000000 [ 2374.420801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2374.420813] R13: 0000000020000080 R14: 00007f4a65410000 R15: 0000000020000240 [ 2374.420840] [ 2374.431191] FAULT_INJECTION: forcing a failure. [ 2374.431191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2374.450164] CPU: 1 UID: 0 PID: 26878 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2374.450196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2374.450209] Call Trace: [ 2374.450217] [ 2374.450226] dump_stack_lvl+0xfa/0x120 [ 2374.450264] should_fail_ex+0x4d7/0x5e0 [ 2374.450301] _copy_from_user+0x30/0xd0 [ 2374.450328] copy_mount_options+0x76/0x180 [ 2374.450357] __x64_sys_mount+0x1ab/0x300 [ 2374.450379] ? __pfx___x64_sys_mount+0x10/0x10 [ 2374.450409] do_syscall_64+0xbf/0x360 [ 2374.450432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2374.450455] RIP: 0033:0x7fe071bcc04a [ 2374.450472] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2374.450494] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2374.450517] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bcc04a [ 2374.450533] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2374.450547] RBP: 00007fe06f140040 R08: 00007fe06f140040 R09: 0000000020000000 [ 2374.450562] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2374.450575] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2374.450611] 04:48:34 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x200000, 0x0) 04:48:34 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 04:48:34 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:34 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb100, 0x46, 0x0) 04:48:34 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 38) [ 2374.650801] FAULT_INJECTION: forcing a failure. [ 2374.650801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2374.652142] CPU: 0 UID: 0 PID: 26993 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2374.652164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2374.652174] Call Trace: [ 2374.652180] [ 2374.652187] dump_stack_lvl+0xfa/0x120 [ 2374.652219] should_fail_ex+0x4d7/0x5e0 [ 2374.652246] strncpy_from_user+0x3b/0x2f0 [ 2374.652268] getname_flags.part.0+0x8d/0x540 [ 2374.652290] getname_flags+0x95/0xe0 [ 2374.652314] user_path_at+0x27/0x90 [ 2374.652337] __x64_sys_mount+0x1e9/0x300 [ 2374.652353] ? __pfx___x64_sys_mount+0x10/0x10 [ 2374.652375] do_syscall_64+0xbf/0x360 [ 2374.652391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2374.652409] RIP: 0033:0x7f12aea1304a [ 2374.652421] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2374.652438] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2374.652454] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea1304a [ 2374.652465] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2374.652475] RBP: 00007f12abf87040 R08: 00007f12abf87040 R09: 0000000020000000 [ 2374.652485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2374.652495] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2374.652516] 04:48:44 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 13) 04:48:44 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x400000, 0x0) 04:48:44 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r6, 0x0], 0x5}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:48:44 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 36) 04:48:44 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 39) 04:48:44 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x700, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:44 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x500, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x6000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 04:48:44 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf500, 0x46, 0x0) [ 2384.829268] FAULT_INJECTION: forcing a failure. [ 2384.829268] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.830348] CPU: 0 UID: 0 PID: 27001 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2384.830366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2384.830373] Call Trace: [ 2384.830377] [ 2384.830382] dump_stack_lvl+0xfa/0x120 [ 2384.830408] should_fail_ex+0x4d7/0x5e0 [ 2384.830428] should_failslab+0xc2/0x120 [ 2384.830441] __kmalloc_cache_noprof+0x73/0x4a0 [ 2384.830456] ? find_held_lock+0x2b/0x80 [ 2384.830474] ? __get_fs_type+0xe6/0x160 [ 2384.830485] ? alloc_fs_context+0x58/0x9e0 [ 2384.830504] ? alloc_fs_context+0x58/0x9e0 [ 2384.830519] ? _raw_read_unlock+0x1e/0x40 [ 2384.830535] alloc_fs_context+0x58/0x9e0 [ 2384.830560] path_mount+0xaa3/0x1fb0 [ 2384.830578] ? kmem_cache_free+0x2a5/0x460 [ 2384.830599] ? __pfx_path_mount+0x10/0x10 [ 2384.830610] ? getname_flags.part.0+0x1c6/0x540 [ 2384.830626] ? putname.part.0+0x11b/0x160 [ 2384.830641] __x64_sys_mount+0x27b/0x300 [ 2384.830652] ? __pfx___x64_sys_mount+0x10/0x10 [ 2384.830668] do_syscall_64+0xbf/0x360 [ 2384.830682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.830695] RIP: 0033:0x7f12aea1304a [ 2384.830704] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.830716] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2384.830728] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea1304a [ 2384.830735] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2384.830743] RBP: 00007f12abf87040 R08: 00007f12abf87040 R09: 0000000020000000 [ 2384.830750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2384.830757] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2384.830772] 04:48:44 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x80000, 0x46, 0x0) [ 2384.884520] FAULT_INJECTION: forcing a failure. [ 2384.884520] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.886323] CPU: 1 UID: 0 PID: 27010 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2384.886354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2384.886368] Call Trace: [ 2384.886376] [ 2384.886384] dump_stack_lvl+0xfa/0x120 [ 2384.886427] should_fail_ex+0x4d7/0x5e0 [ 2384.886463] ? getname_flags.part.0+0x48/0x540 [ 2384.886491] should_failslab+0xc2/0x120 [ 2384.886513] kmem_cache_alloc_noprof+0x5f/0x470 [ 2384.886552] getname_flags.part.0+0x48/0x540 [ 2384.886580] getname_flags+0x95/0xe0 [ 2384.886620] user_path_at+0x27/0x90 [ 2384.886651] __x64_sys_mount+0x1e9/0x300 [ 2384.886674] ? __pfx___x64_sys_mount+0x10/0x10 [ 2384.886704] do_syscall_64+0xbf/0x360 [ 2384.886727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.886750] RIP: 0033:0x7fe071bcc04a [ 2384.886767] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.886789] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2384.886811] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bcc04a [ 2384.886825] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2384.886839] RBP: 00007fe06f140040 R08: 00007fe06f140040 R09: 0000000020000000 [ 2384.886853] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2384.886866] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2384.886895] [ 2384.888817] tmpfs: Bad value for 'size' 04:48:44 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:44 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 40) 04:48:44 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x80002, 0x46, 0x0) 04:48:44 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 14) [ 2384.997090] FAULT_INJECTION: forcing a failure. [ 2384.997090] name failslab, interval 1, probability 0, space 0, times 0 [ 2384.998082] CPU: 0 UID: 0 PID: 27028 Comm: syz-executor.3 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2384.998100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2384.998108] Call Trace: [ 2384.998112] [ 2384.998117] dump_stack_lvl+0xfa/0x120 [ 2384.998143] should_fail_ex+0x4d7/0x5e0 [ 2384.998166] should_failslab+0xc2/0x120 [ 2384.998180] __kmalloc_cache_noprof+0x73/0x4a0 [ 2384.998197] ? find_held_lock+0x2b/0x80 [ 2384.998216] ? __get_fs_type+0xe6/0x160 [ 2384.998227] ? alloc_fs_context+0x58/0x9e0 [ 2384.998248] ? alloc_fs_context+0x58/0x9e0 [ 2384.998264] ? _raw_read_unlock+0x1e/0x40 [ 2384.998281] alloc_fs_context+0x58/0x9e0 [ 2384.998302] path_mount+0xaa3/0x1fb0 [ 2384.998316] ? kmem_cache_free+0x2a5/0x460 [ 2384.998334] ? __pfx_path_mount+0x10/0x10 [ 2384.998346] ? getname_flags.part.0+0x1c6/0x540 [ 2384.998364] ? putname.part.0+0x11b/0x160 [ 2384.998380] __x64_sys_mount+0x27b/0x300 [ 2384.998391] ? __pfx___x64_sys_mount+0x10/0x10 [ 2384.998408] do_syscall_64+0xbf/0x360 [ 2384.998421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2384.998435] RIP: 0033:0x7f12aea1304a [ 2384.998445] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2384.998458] RSP: 002b:00007f12abf86fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2384.998470] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12aea1304a [ 2384.998479] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2384.998486] RBP: 00007f12abf87040 R08: 00007f12abf87040 R09: 0000000020000000 [ 2384.998495] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2384.998502] R13: 0000000020000080 R14: 00007f12abf87000 R15: 00000000200000c0 [ 2384.998518] 04:48:44 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x600000, 0x0) 04:48:44 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = shmget(0x2, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil) shmat(r2, &(0x7f0000ff8000/0x4000)=nil, 0x2000) 04:48:44 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 37) [ 2385.122377] FAULT_INJECTION: forcing a failure. [ 2385.122377] name failslab, interval 1, probability 0, space 0, times 0 [ 2385.123475] CPU: 0 UID: 0 PID: 27042 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2385.123493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2385.123501] Call Trace: [ 2385.123505] [ 2385.123510] dump_stack_lvl+0xfa/0x120 [ 2385.123536] should_fail_ex+0x4d7/0x5e0 [ 2385.123564] ? getname_flags.part.0+0x48/0x540 [ 2385.123586] should_failslab+0xc2/0x120 [ 2385.123609] kmem_cache_alloc_noprof+0x5f/0x470 [ 2385.123631] getname_flags.part.0+0x48/0x540 [ 2385.123648] getname_flags+0x95/0xe0 [ 2385.123666] user_path_at+0x27/0x90 [ 2385.123684] __x64_sys_mount+0x1e9/0x300 [ 2385.123697] ? __pfx___x64_sys_mount+0x10/0x10 [ 2385.123714] do_syscall_64+0xbf/0x360 [ 2385.123727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2385.123741] RIP: 0033:0x7fe071bcc04a [ 2385.123751] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2385.123764] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2385.123776] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bcc04a [ 2385.123785] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2385.123793] RBP: 00007fe06f140040 R08: 00007fe06f140040 R09: 0000000020000000 [ 2385.123802] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2385.123809] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2385.123825] [ 2385.133358] FAULT_INJECTION: forcing a failure. [ 2385.133358] name failslab, interval 1, probability 0, space 0, times 0 [ 2385.138812] CPU: 1 UID: 0 PID: 27048 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2385.138847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2385.138862] Call Trace: [ 2385.138871] [ 2385.138880] dump_stack_lvl+0xfa/0x120 [ 2385.138925] should_fail_ex+0x4d7/0x5e0 [ 2385.138960] ? __ext4_new_inode+0x3378/0x4b90 [ 2385.139008] should_failslab+0xc2/0x120 [ 2385.139045] __kmalloc_node_track_caller_noprof+0xb8/0x4a0 [ 2385.139100] ? sidtab_sid2str_get+0x85/0x6f0 [ 2385.139145] ? sidtab_sid2str_get+0x17e/0x6f0 [ 2385.139187] kmemdup_noprof+0x2b/0x60 [ 2385.139223] sidtab_sid2str_get+0x17e/0x6f0 [ 2385.139264] sidtab_entry_to_string+0x33/0x110 [ 2385.139300] security_sid_to_context_core+0x350/0x620 [ 2385.139339] selinux_inode_init_security+0x433/0x650 [ 2385.139379] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 2385.139414] ? __kasan_kmalloc+0x7f/0x90 [ 2385.139438] ? trace_kmalloc+0x1f/0xb0 [ 2385.139461] ? posix_acl_create.part.0+0x2a0/0x480 [ 2385.139502] security_inode_init_security+0x1e6/0x390 [ 2385.139537] ? __pfx_ext4_initxattrs+0x10/0x10 [ 2385.139561] ? __pfx_security_inode_init_security+0x10/0x10 [ 2385.139597] ? crc32c+0x1ae/0x320 [ 2385.139631] __ext4_new_inode+0x3378/0x4b90 [ 2385.139682] ? __pfx___ext4_new_inode+0x10/0x10 [ 2385.139724] ? __pfx___dquot_initialize+0x10/0x10 [ 2385.139761] ext4_mkdir+0x331/0xb30 [ 2385.139797] ? __pfx_ext4_mkdir+0x10/0x10 [ 2385.139820] ? security_inode_permission+0x72/0xe0 [ 2385.139865] vfs_mkdir+0x59a/0x8d0 [ 2385.139901] do_mkdirat+0x19f/0x3d0 [ 2385.139939] ? __pfx_do_mkdirat+0x10/0x10 [ 2385.139985] __x64_sys_mkdir+0xf3/0x140 [ 2385.140041] do_syscall_64+0xbf/0x360 [ 2385.140073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2385.140097] RIP: 0033:0x7f4a67e99c27 [ 2385.140115] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2385.140141] RSP: 002b:00007f4a6540ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2385.140164] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a67e99c27 [ 2385.140180] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2385.140195] RBP: 00007f4a65410040 R08: 0000000000000000 R09: 0000000000000000 [ 2385.140209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2385.140223] R13: 0000000020000080 R14: 00007f4a65410000 R15: 0000000020000240 [ 2385.140256] 04:48:55 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 41) 04:48:55 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc0ff20, 0x46, 0x0) 04:48:55 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xa00, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:55 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r1 = shmget(0x1, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) r2 = geteuid() r3 = gettid() tgkill(0x0, r3, 0x80000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r5, 0x0, 0x0, 0x18, 0x1170}, 0xb30b, 0x1, 0x21, 0x3, 0x0, r3, 0x6}) r6 = clone3(0x0, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = fork() clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x2e}, &(0x7f00000000c0)=""/234, 0xea, &(0x7f00000001c0)=""/192, &(0x7f0000000280)=[0x0, r7, r6, r8], 0x4}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r2, r5, 0x0, 0x0, 0x0, 0xfff}, 0x1, 0x1, 0x0, 0x1f, r8, r9, 0xa000}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 04:48:55 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 38) 04:48:55 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget(0x3, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x5000) 04:48:55 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x80ffff, 0x0) 04:48:55 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 15) [ 2396.157097] tmpfs: Bad value for 'size' 04:48:56 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget(0x3, 0x1000, 0x78000000, &(0x7f0000ffb000/0x1000)=nil) r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000000000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmdt(r3) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffb000/0x1000)=nil) 04:48:56 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xb00, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) 04:48:56 executing program 5: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0xc0ffff, 0x0) 04:48:56 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) (fail_nth: 42) 04:48:56 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}, {@size={'size', 0x3d, [0x65, 0x38]}}]}) (fail_nth: 16) 04:48:56 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mpol=prefer:00']) (fail_nth: 39) 04:48:56 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd0ff20, 0x46, 0x0) 04:48:56 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1020, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) [ 2396.383793] FAULT_INJECTION: forcing a failure. [ 2396.383793] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.385570] CPU: 0 UID: 0 PID: 27234 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2396.385606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.385619] Call Trace: [ 2396.385627] [ 2396.385635] dump_stack_lvl+0xfa/0x120 [ 2396.385676] should_fail_ex+0x4d7/0x5e0 [ 2396.385713] should_failslab+0xc2/0x120 [ 2396.385736] __kmalloc_cache_noprof+0x73/0x4a0 [ 2396.385764] ? find_held_lock+0x2b/0x80 [ 2396.385795] ? __get_fs_type+0xe6/0x160 [ 2396.385815] ? alloc_fs_context+0x58/0x9e0 [ 2396.385849] ? alloc_fs_context+0x58/0x9e0 [ 2396.385877] ? _raw_read_unlock+0x1e/0x40 [ 2396.385905] alloc_fs_context+0x58/0x9e0 [ 2396.385941] path_mount+0xaa3/0x1fb0 [ 2396.385964] ? kmem_cache_free+0x2a5/0x460 [ 2396.385994] ? __pfx_path_mount+0x10/0x10 [ 2396.386013] ? getname_flags.part.0+0x1c6/0x540 [ 2396.386043] ? putname.part.0+0x11b/0x160 [ 2396.386071] __x64_sys_mount+0x27b/0x300 [ 2396.386092] ? __pfx___x64_sys_mount+0x10/0x10 [ 2396.386121] do_syscall_64+0xbf/0x360 [ 2396.386144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.386166] RIP: 0033:0x7fe071bcc04a [ 2396.386183] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.386204] RSP: 002b:00007fe06f13ffa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2396.386226] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe071bcc04a [ 2396.386241] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 2396.386255] RBP: 00007fe06f140040 R08: 00007fe06f140040 R09: 0000000020000000 [ 2396.386269] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 2396.386282] R13: 0000000020000080 R14: 00007fe06f140000 R15: 0000000020000100 [ 2396.386311] [ 2396.426260] FAULT_INJECTION: forcing a failure. [ 2396.426260] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.427649] CPU: 1 UID: 0 PID: 27273 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2396.427672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.427682] Call Trace: [ 2396.427688] [ 2396.427694] dump_stack_lvl+0xfa/0x120 [ 2396.427725] should_fail_ex+0x4d7/0x5e0 [ 2396.427751] ? ext4_find_extent+0x7f5/0xa00 [ 2396.427766] should_failslab+0xc2/0x120 [ 2396.427783] __kmalloc_noprof+0xb4/0x4c0 [ 2396.427803] ? __is_insn_slot_addr+0x2e/0x290 [ 2396.427830] ext4_find_extent+0x7f5/0xa00 [ 2396.427849] ext4_ext_map_blocks+0x1cc/0x5f30 [ 2396.427869] ? lock_is_held_type+0x9e/0x120 [ 2396.427899] ? bdev_getblk+0x98/0x680 [ 2396.427924] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2396.427940] ? ext4_get_group_desc+0x294/0x550 [ 2396.427961] ? map_id_range_up+0x1d5/0x350 [ 2396.427977] ? crc32c+0x1ae/0x320 [ 2396.427989] ? look_up_lock_class+0x56/0x150 [ 2396.428011] ? register_lock_class+0x41/0x560 [ 2396.428033] ? __lock_acquire+0xc65/0x1b70 [ 2396.428056] ? lock_acquire+0xdf/0x2e0 [ 2396.428071] ? ext4_map_blocks+0x4b0/0x15a0 [ 2396.428094] ext4_map_query_blocks+0x117/0x890 [ 2396.428113] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 2396.428130] ? __pfx_down_read+0x10/0x10 [ 2396.428146] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2396.428169] ext4_map_blocks+0x4c3/0x15a0 [ 2396.428190] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2396.428215] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2396.428238] ? __pfx_security_inode_init_security+0x10/0x10 [ 2396.428262] ? crc32c+0x1ae/0x320 [ 2396.428275] ? __brelse+0x7f/0xa0 [ 2396.428296] ext4_append+0x1b6/0x530 [ 2396.428320] ? __pfx_ext4_append+0x10/0x10 [ 2396.428344] ? __pfx___ext4_new_inode+0x10/0x10 [ 2396.428370] ext4_init_new_dir+0x21e/0x460 [ 2396.428387] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2396.428409] ext4_mkdir+0x3c5/0xb30 [ 2396.428428] ? __pfx_ext4_mkdir+0x10/0x10 [ 2396.428442] ? security_inode_permission+0x72/0xe0 [ 2396.428471] vfs_mkdir+0x59a/0x8d0 [ 2396.428494] do_mkdirat+0x19f/0x3d0 [ 2396.428518] ? __pfx_do_mkdirat+0x10/0x10 [ 2396.428547] __x64_sys_mkdir+0xf3/0x140 [ 2396.428570] do_syscall_64+0xbf/0x360 [ 2396.428586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.428607] RIP: 0033:0x7f4a67e99c27 [ 2396.428619] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.428634] RSP: 002b:00007f4a6540ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2396.428648] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a67e99c27 [ 2396.428659] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2396.428668] RBP: 00007f4a65410040 R08: 0000000000000000 R09: 0000000000000000 [ 2396.428676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2396.428685] R13: 0000000020000080 R14: 00007f4a65410000 R15: 0000000020000240 [ 2396.428706] [ 2396.455613] ================================================================== [ 2396.456337] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x24d/0x560 [ 2396.457042] Write of size 8 at addr ffff88804489bcc0 by task syz-executor.6/27273 [ 2396.457867] [ 2396.458068] CPU: 1 UID: 0 PID: 27273 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250701 #1 PREEMPT(voluntary) [ 2396.458088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.458098] Call Trace: [ 2396.458105] [ 2396.458111] dump_stack_lvl+0xca/0x120 [ 2396.458137] print_report+0xcb/0x670 [ 2396.458155] ? __virt_addr_valid+0x100/0x5d0 [ 2396.458175] ? flush_tlb_func+0x24d/0x560 [ 2396.458196] ? flush_tlb_func+0x24d/0x560 [ 2396.458218] kasan_report+0xca/0x100 [ 2396.458235] ? flush_tlb_func+0x24d/0x560 [ 2396.458258] kasan_check_range+0x37/0x1a0 [ 2396.458277] flush_tlb_func+0x24d/0x560 [ 2396.458299] ? lock_acquire+0xdf/0x2e0 [ 2396.458318] ? __pfx_flush_tlb_func+0x10/0x10 [ 2396.458339] __flush_smp_call_function_queue+0x20d/0x740 [ 2396.458363] __sysvec_call_function_single+0x6d/0x360 [ 2396.458387] sysvec_call_function_single+0x5f/0xc0 [ 2396.458408] asm_sysvec_call_function_single+0x1a/0x20 [ 2396.458424] RIP: 0010:handle_softirqs+0x174/0x770 [ 2396.458447] Code: c8 83 83 3c 0a 00 00 01 c7 44 24 20 0a 00 00 00 48 89 44 24 18 65 66 c7 05 cf 84 47 06 00 00 e8 22 65 40 00 fb bb ff ff ff ff <48> c7 c5 c0 c0 a0 85 41 0f bc de 83 c3 01 0f 85 9b 00 00 00 e9 8d [ 2396.458462] RSP: 0018:ffff88806cf08f78 EFLAGS: 00000206 [ 2396.458475] RAX: 000000000000013a RBX: 00000000ffffffff RCX: 0000000000000008 [ 2396.458485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff813b5b6e [ 2396.458494] RBP: ffff88801a48f498 R08: 0000000000000001 R09: 0000000000000001 [ 2396.458503] R10: ffffffff86438657 R11: 0000000000000001 R12: 0000000000000000 [ 2396.458512] R13: 0000000000000000 R14: 0000000000000302 R15: 0000000000000000 [ 2396.458525] ? handle_softirqs+0x16e/0x770 [ 2396.458545] ? handle_softirqs+0x16e/0x770 [ 2396.458567] __irq_exit_rcu+0xc4/0x100 [ 2396.458586] irq_exit_rcu+0x9/0x20 [ 2396.458605] sysvec_apic_timer_interrupt+0x70/0x80 [ 2396.458625] [ 2396.458629] [ 2396.458635] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2396.458650] RIP: 0010:dump_stack_lvl+0x115/0x120 [ 2396.458672] Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 e6 50 7b fc e8 d1 07 a5 fc 48 89 ee 31 ff e8 d7 a5 c4 fc e8 72 aa c4 fc e8 7d d4 cc fc fb 5b <5d> 41 5c e9 63 aa c4 fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 2396.458687] RSP: 0018:ffff88801a48f540 EFLAGS: 00000202 [ 2396.458698] RAX: 0000000000000137 RBX: ffffffff85d01f20 RCX: 0000000000000080 [ 2396.458707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84aeec13 [ 2396.458717] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 [ 2396.458725] R10: ffffffff86438657 R11: 0000000000000001 R12: ffffffff8530f500 [ 2396.458735] R13: ffffffff85d01f30 R14: 0000000000000000 R15: 0000000000000000 [ 2396.458747] ? dump_stack_lvl+0x113/0x120 [ 2396.458769] should_fail_ex+0x4d7/0x5e0 [ 2396.458792] ? ext4_find_extent+0x7f5/0xa00 [ 2396.458806] should_failslab+0xc2/0x120 [ 2396.458820] __kmalloc_noprof+0xb4/0x4c0 [ 2396.458839] ? __is_insn_slot_addr+0x2e/0x290 [ 2396.458861] ext4_find_extent+0x7f5/0xa00 [ 2396.458877] ext4_ext_map_blocks+0x1cc/0x5f30 [ 2396.458894] ? lock_is_held_type+0x9e/0x120 [ 2396.458920] ? bdev_getblk+0x98/0x680 [ 2396.458945] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2396.458960] ? ext4_get_group_desc+0x294/0x550 [ 2396.458979] ? map_id_range_up+0x1d5/0x350 [ 2396.458995] ? crc32c+0x1ae/0x320 [ 2396.459007] ? look_up_lock_class+0x56/0x150 [ 2396.459027] ? register_lock_class+0x41/0x560 [ 2396.459043] ? __lock_acquire+0xc65/0x1b70 [ 2396.459061] ? lock_acquire+0xdf/0x2e0 [ 2396.459075] ? ext4_map_blocks+0x4b0/0x15a0 [ 2396.459096] ext4_map_query_blocks+0x117/0x890 [ 2396.459113] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 2396.459129] ? __pfx_down_read+0x10/0x10 [ 2396.459144] ? ext4_es_lookup_extent+0xc8/0xb20 [ 2396.459163] ext4_map_blocks+0x4c3/0x15a0 [ 2396.459182] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2396.459205] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2396.459224] ? __pfx_security_inode_init_security+0x10/0x10 [ 2396.459246] ? crc32c+0x1ae/0x320 [ 2396.459258] ? __brelse+0x7f/0xa0 [ 2396.459276] ext4_append+0x1b6/0x530 [ 2396.459297] ? __pfx_ext4_append+0x10/0x10 [ 2396.459319] ? __pfx___ext4_new_inode+0x10/0x10 [ 2396.459342] ext4_init_new_dir+0x21e/0x460 [ 2396.459357] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2396.459374] ext4_mkdir+0x3c5/0xb30 [ 2396.459390] ? __pfx_ext4_mkdir+0x10/0x10 [ 2396.459404] ? security_inode_permission+0x72/0xe0 [ 2396.459429] vfs_mkdir+0x59a/0x8d0 [ 2396.459449] do_mkdirat+0x19f/0x3d0 [ 2396.459471] ? __pfx_do_mkdirat+0x10/0x10 [ 2396.459494] __x64_sys_mkdir+0xf3/0x140 [ 2396.459516] do_syscall_64+0xbf/0x360 [ 2396.459529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.459544] RIP: 0033:0x7f4a67e99c27 [ 2396.459554] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.459568] RSP: 002b:00007f4a6540ffa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2396.459582] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a67e99c27 [ 2396.459591] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000080 [ 2396.459600] RBP: 00007f4a65410040 R08: 0000000000000000 R09: 0000000000000000 [ 2396.459609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 2396.459618] R13: 0000000020000080 R14: 00007f4a65410000 R15: 0000000020000240 [ 2396.459632] [ 2396.459637] [ 2396.515895] Allocated by task 286: [ 2396.516260] kasan_save_stack+0x24/0x50 [ 2396.516662] kasan_save_track+0x14/0x30 [ 2396.517058] __kasan_slab_alloc+0x59/0x70 [ 2396.517457] kmem_cache_alloc_noprof+0x13e/0x470 [ 2396.517928] copy_process+0x6f3a/0x73e0 [ 2396.518338] kernel_clone+0xea/0x820 [ 2396.518708] __do_sys_clone+0xce/0x120 [ 2396.519092] do_syscall_64+0xbf/0x360 [ 2396.519471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.519969] [ 2396.520151] Freed by task 27151: [ 2396.520481] kasan_save_stack+0x24/0x50 [ 2396.520883] kasan_save_track+0x14/0x30 [ 2396.521268] kasan_save_free_info+0x3c/0x90 [ 2396.521692] __kasan_slab_free+0x3c/0x60 [ 2396.522088] kmem_cache_free+0x2a5/0x460 [ 2396.522491] mmput+0x305/0x390 [ 2396.522829] do_exit+0x79d/0x2970 [ 2396.523176] do_group_exit+0xd3/0x2a0 [ 2396.523560] get_signal+0x2315/0x2340 [ 2396.523946] arch_do_signal_or_restart+0x80/0x790 [ 2396.524421] exit_to_user_mode_loop+0x8b/0x100 [ 2396.524885] do_syscall_64+0x2f7/0x360 [ 2396.525261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2396.525754] [ 2396.525926] The buggy address belongs to the object at ffff88804489b340 [ 2396.525926] which belongs to the cache mm_struct of size 2456 [ 2396.527094] The buggy address is located 2432 bytes inside of [ 2396.527094] freed 2456-byte region [ffff88804489b340, ffff88804489bcd8) [ 2396.528276] [ 2396.528445] The buggy address belongs to the physical page: [ 2396.528990] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44898 [ 2396.529759] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2396.530489] memcg:ffff888039865d01 [ 2396.530828] flags: 0x100000000000040(head|node=0|zone=1) [ 2396.531349] page_type: f5(slab) [ 2396.531681] raw: 0100000000000040 ffff888008c4bc80 ffffea0000573400 dead000000000002 [ 2396.532427] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888039865d01 [ 2396.533192] head: 0100000000000040 ffff888008c4bc80 ffffea0000573400 dead000000000002 [ 2396.533948] head: 0000000000000000 00000000000c000c 00000000f5000000 ffff888039865d01 [ 2396.534695] head: 0100000000000003 ffffea0001122601 00000000ffffffff 00000000ffffffff [ 2396.535448] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 2396.536202] page dumped because: kasan: bad access detected [ 2396.536731] [ 2396.536912] Memory state around the buggy address: [ 2396.537381] ffff88804489bb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2396.538068] ffff88804489bc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2396.538763] >ffff88804489bc80: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 2396.539462] ^ [ 2396.539970] ffff88804489bd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2396.540656] ffff88804489bd80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2396.541360] ================================================================== [ 2396.542046] Disabling lock debugging due to kernel taint VM DIAGNOSIS: 04:48:56 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=ffffea0000d46500 RCX=ffffffff819c5737 RDX=ffff8880403bb700 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000124 RSP=ffff888044f67668 R8 =0000000000000000 R9 =fffff940001a8c9e R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=00007fe070e1e000 R14=ffff888044f67ad0 R15=8000000035194007 RIP=ffffffff81738ff7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f11a74072c0 CR3=000000003a5aa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b9285 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff88806cf08838 R8 =0000000000000000 R9 =ffffed1001cce046 R10=000000000000005b R11=0000000041543c20 R12=000000000000005b R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b9270 RIP=ffffffff828b92dd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4a65410700 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4a6540ff78 CR3=0000000043118000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000