$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:30:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2443.232682] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2443.233422] CPU: 0 PID: 10762 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2443.233960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2443.234493] Call Trace: [ 2443.234695] [ 2443.234865] dump_stack_lvl+0xc1/0xf0 [ 2443.235155] dump_header+0x10a/0xd50 [ 2443.235436] oom_kill_process+0x25d/0x600 [ 2443.235730] out_of_memory+0x35c/0x1660 [ 2443.236021] ? find_held_lock+0x2c/0x110 [ 2443.236317] ? __pfx_out_of_memory+0x10/0x10 [ 2443.236632] ? rcu_read_unlock+0x9/0x60 [ 2443.236930] ? lock_release+0x1e3/0x710 [ 2443.237221] ? lock_is_held_type+0x9f/0x120 [ 2443.237541] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2443.237886] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2443.238272] ? mem_cgroup_iter+0x291/0x710 [ 2443.238578] try_charge_memcg+0xec4/0x12e0 [ 2443.238887] ? lock_is_held_type+0x40/0x120 [ 2443.239202] ? __pfx_try_charge_memcg+0x10/0x10 [ 2443.239541] ? lock_release+0x1e3/0x710 [ 2443.239839] ? __pfx_lock_release+0x10/0x10 [ 2443.240152] ? trace_lock_acquire+0x170/0x1e0 [ 2443.240476] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2443.240823] ? lock_acquire+0x32/0xc0 [ 2443.241112] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2443.241466] charge_memcg+0x85/0x2c0 [ 2443.241750] __mem_cgroup_charge+0x28/0x90 [ 2443.242052] __handle_mm_fault+0x102b/0x31c0 [ 2443.242371] ? lock_acquire.part.0+0xec/0x320 [ 2443.242700] ? lock_is_held_type+0x9f/0x120 [ 2443.243007] ? __pfx___handle_mm_fault+0x10/0x10 [ 2443.243362] handle_mm_fault+0x1b8/0x860 [ 2443.243653] __get_user_pages+0x4d6/0x1060 [ 2443.243970] ? __pfx___get_user_pages+0x10/0x10 [ 2443.244308] ? __pfx_mt_find+0x10/0x10 [ 2443.244599] populate_vma_page_range+0x2e7/0x420 [ 2443.244950] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2443.245320] ? __pfx_find_vma_intersection+0x10/0x10 [ 2443.245685] ? lock_acquire+0x32/0xc0 [ 2443.245965] ? __mm_populate+0x228/0x3a0 [ 2443.246264] __mm_populate+0x102/0x3a0 [ 2443.246553] ? __pfx___mm_populate+0x10/0x10 [ 2443.246872] ? up_write+0x196/0x510 [ 2443.247145] __do_sys_mlockall+0x414/0x4a0 [ 2443.247454] do_syscall_64+0x3f/0x90 [ 2443.247729] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2443.248103] RIP: 0033:0x7fd09934cb19 [ 2443.248362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2443.249602] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2443.250132] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2443.250620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2443.251113] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2443.251606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2443.252098] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2443.252598] [ 2443.252816] memory: usage 307200kB, limit 307200kB, failcnt 10333 [ 2443.253255] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2443.253671] Memory cgroup stats for /syz6: [ 2443.253819] anon 291074048 [ 2443.253819] file 16646144 [ 2443.253819] kernel 6852608 [ 2443.253819] kernel_stack 950272 [ 2443.253819] pagetables 4198400 [ 2443.253819] sec_pagetables 0 [ 2443.253819] percpu 1792 [ 2443.253819] sock 0 [ 2443.253819] vmalloc 0 [ 2443.253819] shmem 0 [ 2443.253819] file_mapped 16646144 [ 2443.253819] file_dirty 0 [ 2443.253819] file_writeback 0 [ 2443.253819] swapcached 0 [ 2443.253819] inactive_anon 269533184 [ 2443.253819] active_anon 0 [ 2443.253819] inactive_file 0 [ 2443.253819] active_file 0 [ 2443.253819] unevictable 38187008 [ 2443.253819] slab_reclaimable 108576 [ 2443.253819] slab_unreclaimable 1008176 [ 2443.253819] slab 1116752 [ 2443.253819] workingset_refault_anon 0 [ 2443.253819] workingset_refault_file 5 [ 2443.253819] workingset_activate_anon 0 [ 2443.253819] workingset_activate_file 0 [ 2443.253819] workingset_restore_anon 0 [ 2443.253819] workingset_restore_file 0 [ 2443.253819] workingset_nodereclaim 0 [ 2443.253819] pgscan 2139 [ 2443.253819] pgsteal 1014 [ 2443.253819] pgscan_kswapd 0 [ 2443.253819] pgscan_direct 2139 [ 2443.253819] pgscan_khugepaged 0 [ 2443.253819] pgsteal_kswapd 0 [ 2443.253819] pgsteal_direct 1014 [ 2443.253819] pgsteal_khugepaged 0 [ 2443.253819] pgfault 1021011 [ 2443.253819] pgmajfault 0 [ 2443.253819] pgrefill 1163 [ 2443.253819] pgactivate 139932 [ 2443.253819] pgdeactivate 1145 [ 2443.253819] pglazyfree 0 [ 2443.253819] pglazyfreed 0 [ 2443.262222] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=10753,uid=0 [ 2443.263252] Memory cgroup out of memory: Killed process 10753 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2443.312100] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2443.312759] CPU: 0 PID: 10757 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2443.313305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2443.313847] Call Trace: [ 2443.314029] [ 2443.314198] dump_stack_lvl+0xc1/0xf0 [ 2443.314473] dump_header+0x10a/0xd50 [ 2443.314741] oom_kill_process+0x25d/0x600 [ 2443.315031] out_of_memory+0x35c/0x1660 [ 2443.315318] ? find_held_lock+0x2c/0x110 [ 2443.315601] ? __pfx_out_of_memory+0x10/0x10 [ 2443.315903] ? rcu_read_unlock+0x9/0x60 [ 2443.316184] ? lock_release+0x1e3/0x710 [ 2443.316464] ? lock_is_held_type+0x9f/0x120 [ 2443.316799] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2443.317139] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2443.317509] ? mem_cgroup_iter+0x291/0x710 [ 2443.317817] try_charge_memcg+0xec4/0x12e0 [ 2443.318120] ? lock_is_held_type+0x40/0x120 [ 2443.318427] ? __pfx_try_charge_memcg+0x10/0x10 [ 2443.318754] ? lock_release+0x1e3/0x710 [ 2443.319035] ? __pfx_lock_release+0x10/0x10 [ 2443.319339] ? trace_lock_acquire+0x170/0x1e0 [ 2443.319668] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2443.320007] ? lock_acquire+0x32/0xc0 [ 2443.320278] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2443.320619] charge_memcg+0x85/0x2c0 [ 2443.320919] __mem_cgroup_charge+0x28/0x90 [ 2443.321212] __handle_mm_fault+0x102b/0x31c0 [ 2443.321539] ? lock_acquire.part.0+0xec/0x320 [ 2443.321855] ? lock_is_held_type+0x9f/0x120 [ 2443.322174] ? __pfx___handle_mm_fault+0x10/0x10 [ 2443.322517] handle_mm_fault+0x1b8/0x860 [ 2443.322820] __get_user_pages+0x4d6/0x1060 [ 2443.323129] ? __pfx___get_user_pages+0x10/0x10 [ 2443.323463] ? __pfx_mt_find+0x10/0x10 [ 2443.323750] populate_vma_page_range+0x2e7/0x420 [ 2443.324081] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2443.324435] ? __pfx_find_vma_intersection+0x10/0x10 [ 2443.324783] ? lock_acquire+0x32/0xc0 [ 2443.325064] ? __mm_populate+0x228/0x3a0 [ 2443.325358] __mm_populate+0x102/0x3a0 [ 2443.325635] ? __pfx___mm_populate+0x10/0x10 [ 2443.325950] ? up_write+0x196/0x510 [ 2443.326212] __do_sys_mlockall+0x414/0x4a0 [ 2443.326508] do_syscall_64+0x3f/0x90 [ 2443.326776] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2443.327137] RIP: 0033:0x7ff90dfe0b19 [ 2443.327387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2443.328558] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2443.329066] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2443.329527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2443.329982] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2443.330459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2443.330935] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2443.331420] [ 2443.332244] memory: usage 307200kB, limit 307200kB, failcnt 3941 [ 2443.332681] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2443.333292] Memory cgroup stats for /syz4: [ 2443.333417] anon 289349632 [ 2443.333417] file 20451328 [ 2443.333417] kernel 4771840 [ 2443.333417] kernel_stack 622592 [ 2443.333417] pagetables 3002368 [ 2443.333417] sec_pagetables 0 [ 2443.333417] percpu 1152 [ 2443.333417] sock 0 [ 2443.333417] vmalloc 0 [ 2443.333417] shmem 0 [ 2443.333417] file_mapped 20447232 [ 2443.333417] file_dirty 0 [ 2443.333417] file_writeback 0 [ 2443.333417] swapcached 0 [ 2443.333417] inactive_anon 259604480 [ 2443.333417] active_anon 0 [ 2443.333417] inactive_file 0 [ 2443.333417] active_file 4096 [ 2443.333417] unevictable 50192384 [ 2443.333417] slab_reclaimable 101520 [ 2443.333417] slab_unreclaimable 664160 [ 2443.333417] slab 765680 [ 2443.333417] workingset_refault_anon 0 [ 2443.333417] workingset_refault_file 8354 [ 2443.333417] workingset_activate_anon 0 [ 2443.333417] workingset_activate_file 22 [ 2443.333417] workingset_restore_anon 0 [ 2443.333417] workingset_restore_file 0 [ 2443.333417] workingset_nodereclaim 0 [ 2443.333417] pgscan 11268 [ 2443.333417] pgsteal 8370 [ 2443.333417] pgscan_kswapd 1 [ 2443.333417] pgscan_direct 11267 [ 2443.333417] pgscan_khugepaged 0 [ 2443.333417] pgsteal_kswapd 0 [ 2443.333417] pgsteal_direct 8370 [ 2443.333417] pgsteal_khugepaged 0 [ 2443.333417] pgfault 490097 [ 2443.333417] pgmajfault 27 [ 2443.333417] pgrefill 1360 [ 2443.333417] pgactivate 48865 [ 2443.333417] pgdeactivate 1360 [ 2443.333417] pglazyfree 0 [ 2443.333417] pglazyfreed 0 [ 2443.342075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10755,uid=0 [ 2443.343085] Memory cgroup out of memory: Killed process 10755 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:31:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:31:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x0, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:11 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:31:11 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:31:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:11 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), 0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, 0x0], 0x8, {r1}}, 0x58) 16:31:11 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) 16:31:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:31:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x0, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:31:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x0, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:31:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x0, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:31:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2455.643885] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2455.644568] CPU: 1 PID: 10804 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2455.645111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2455.645649] Call Trace: [ 2455.645828] [ 2455.645985] dump_stack_lvl+0xc1/0xf0 [ 2455.646270] dump_header+0x10a/0xd50 [ 2455.646540] oom_kill_process+0x25d/0x600 [ 2455.646826] out_of_memory+0x35c/0x1660 [ 2455.647103] ? find_held_lock+0x2c/0x110 [ 2455.647390] ? __pfx_out_of_memory+0x10/0x10 [ 2455.647685] ? rcu_read_unlock+0x9/0x60 [ 2455.647967] ? lock_release+0x1e3/0x710 [ 2455.648249] ? lock_is_held_type+0x9f/0x120 [ 2455.648561] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2455.648894] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2455.649260] ? mem_cgroup_iter+0x291/0x710 [ 2455.649563] try_charge_memcg+0xec4/0x12e0 [ 2455.649860] ? lock_is_held_type+0x40/0x120 [ 2455.650157] ? __pfx_try_charge_memcg+0x10/0x10 [ 2455.650480] ? lock_release+0x1e3/0x710 [ 2455.650766] ? __pfx_lock_release+0x10/0x10 [ 2455.651067] ? trace_lock_acquire+0x170/0x1e0 [ 2455.651389] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2455.651720] ? lock_acquire+0x32/0xc0 [ 2455.651991] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2455.652335] charge_memcg+0x85/0x2c0 [ 2455.652612] __mem_cgroup_charge+0x28/0x90 [ 2455.652904] __handle_mm_fault+0x102b/0x31c0 [ 2455.653215] ? lock_acquire.part.0+0xec/0x320 [ 2455.653537] ? lock_is_held_type+0x9f/0x120 [ 2455.653866] ? __pfx___handle_mm_fault+0x10/0x10 [ 2455.654235] handle_mm_fault+0x1b8/0x860 [ 2455.654536] __get_user_pages+0x4d6/0x1060 [ 2455.654862] ? __pfx___get_user_pages+0x10/0x10 [ 2455.655181] ? __pfx_mt_find+0x10/0x10 [ 2455.655484] populate_vma_page_range+0x2e7/0x420 [ 2455.655809] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2455.656184] ? __pfx_find_vma_intersection+0x10/0x10 [ 2455.656529] ? lock_acquire+0x32/0xc0 [ 2455.656821] ? __mm_populate+0x228/0x3a0 [ 2455.657122] __mm_populate+0x102/0x3a0 [ 2455.657414] ? __pfx___mm_populate+0x10/0x10 [ 2455.657741] ? up_write+0x196/0x510 [ 2455.658015] __do_sys_mlockall+0x414/0x4a0 [ 2455.658308] do_syscall_64+0x3f/0x90 [ 2455.658598] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2455.658952] RIP: 0033:0x7fd09934cb19 [ 2455.659223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2455.660477] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2455.661023] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2455.661498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2455.662005] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2455.662506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2455.663018] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2455.663539] [ 2455.663810] memory: usage 307200kB, limit 307200kB, failcnt 10383 [ 2455.664240] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2455.664679] Memory cgroup stats for /syz6: [ 2455.664823] anon 291074048 [ 2455.664823] file 16646144 [ 2455.664823] kernel 6852608 [ 2455.664823] kernel_stack 950272 [ 2455.664823] pagetables 4198400 [ 2455.664823] sec_pagetables 0 [ 2455.664823] percpu 1792 [ 2455.664823] sock 0 [ 2455.664823] vmalloc 0 [ 2455.664823] shmem 0 [ 2455.664823] file_mapped 16646144 [ 2455.664823] file_dirty 0 [ 2455.664823] file_writeback 0 [ 2455.664823] swapcached 0 [ 2455.664823] inactive_anon 269533184 [ 2455.664823] active_anon 0 [ 2455.664823] inactive_file 0 [ 2455.664823] active_file 0 [ 2455.664823] unevictable 38187008 [ 2455.664823] slab_reclaimable 108576 [ 2455.664823] slab_unreclaimable 1008176 [ 2455.664823] slab 1116752 [ 2455.664823] workingset_refault_anon 0 [ 2455.664823] workingset_refault_file 5 [ 2455.664823] workingset_activate_anon 0 [ 2455.664823] workingset_activate_file 0 [ 2455.664823] workingset_restore_anon 0 [ 2455.664823] workingset_restore_file 0 [ 2455.664823] workingset_nodereclaim 0 [ 2455.664823] pgscan 2139 [ 2455.664823] pgsteal 1014 [ 2455.664823] pgscan_kswapd 0 [ 2455.664823] pgscan_direct 2139 [ 2455.664823] pgscan_khugepaged 0 [ 2455.664823] pgsteal_kswapd 0 [ 2455.664823] pgsteal_direct 1014 [ 2455.664823] pgsteal_khugepaged 0 [ 2455.664823] pgfault 1026556 [ 2455.664823] pgmajfault 0 [ 2455.664823] pgrefill 1163 [ 2455.664823] pgactivate 140528 [ 2455.664823] pgdeactivate 1145 [ 2455.664823] pglazyfree 0 [ 2455.664823] pglazyfreed 0 [ 2455.673417] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=10795,uid=0 [ 2455.674440] Memory cgroup out of memory: Killed process 10795 (syz-executor.6) total-vm:93412kB, anon-rss:21268kB, file-rss:51840kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2455.994023] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2455.995377] CPU: 0 PID: 10802 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2455.996555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2455.997707] Call Trace: [ 2455.998085] [ 2455.998417] dump_stack_lvl+0xc1/0xf0 [ 2455.998980] dump_header+0x10a/0xd50 [ 2455.999522] oom_kill_process+0x25d/0x600 [ 2456.000122] out_of_memory+0x35c/0x1660 [ 2456.000695] ? find_held_lock+0x2c/0x110 [ 2456.001302] ? __pfx_out_of_memory+0x10/0x10 [ 2456.001943] ? rcu_read_unlock+0x9/0x60 [ 2456.002547] ? lock_release+0x1e3/0x710 [ 2456.003142] ? lock_is_held_type+0x9f/0x120 [ 2456.003795] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2456.004507] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2456.005291] ? mem_cgroup_iter+0x291/0x710 [ 2456.005883] try_charge_memcg+0xec4/0x12e0 [ 2456.006465] ? lock_is_held_type+0x40/0x120 [ 2456.007059] ? __pfx_try_charge_memcg+0x10/0x10 [ 2456.007688] ? lock_release+0x1e3/0x710 [ 2456.008243] ? __pfx_lock_release+0x10/0x10 [ 2456.008841] ? trace_lock_acquire+0x170/0x1e0 [ 2456.009464] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2456.010100] ? lock_acquire+0x32/0xc0 [ 2456.010627] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2456.011282] charge_memcg+0x85/0x2c0 [ 2456.011827] __mem_cgroup_charge+0x28/0x90 [ 2456.012392] __handle_mm_fault+0x102b/0x31c0 [ 2456.012983] ? lock_acquire.part.0+0xec/0x320 [ 2456.013618] ? lock_is_held_type+0x9f/0x120 [ 2456.014205] ? __pfx___handle_mm_fault+0x10/0x10 [ 2456.014873] handle_mm_fault+0x1b8/0x860 [ 2456.015424] __get_user_pages+0x4d6/0x1060 [ 2456.016015] ? __pfx___get_user_pages+0x10/0x10 [ 2456.016648] ? __pfx_mt_find+0x10/0x10 [ 2456.017205] populate_vma_page_range+0x2e7/0x420 [ 2456.017844] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2456.018536] ? __pfx_find_vma_intersection+0x10/0x10 [ 2456.019217] ? lock_acquire+0x32/0xc0 [ 2456.019742] ? __mm_populate+0x228/0x3a0 [ 2456.020325] __mm_populate+0x102/0x3a0 [ 2456.020866] ? __pfx___mm_populate+0x10/0x10 [ 2456.021483] ? up_write+0x196/0x510 [ 2456.021982] __do_sys_mlockall+0x414/0x4a0 [ 2456.022560] do_syscall_64+0x3f/0x90 [ 2456.023079] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2456.023752] RIP: 0033:0x7ff90dfe0b19 [ 2456.024233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2456.026479] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2456.027423] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2456.028310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2456.029216] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2456.030110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2456.031117] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2456.032203] [ 2456.033873] memory: usage 307200kB, limit 307200kB, failcnt 4006 [ 2456.034772] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2456.035946] Memory cgroup stats for /syz4: [ 2456.036196] anon 289349632 [ 2456.036196] file 20451328 [ 2456.036196] kernel 4771840 [ 2456.036196] kernel_stack 622592 [ 2456.036196] pagetables 3002368 [ 2456.036196] sec_pagetables 0 [ 2456.036196] percpu 1152 [ 2456.036196] sock 0 [ 2456.036196] vmalloc 0 [ 2456.036196] shmem 0 [ 2456.036196] file_mapped 20447232 [ 2456.036196] file_dirty 4096 [ 2456.036196] file_writeback 0 [ 2456.036196] swapcached 0 [ 2456.036196] inactive_anon 259604480 [ 2456.036196] active_anon 0 [ 2456.036196] inactive_file 0 [ 2456.036196] active_file 4096 [ 2456.036196] unevictable 50192384 [ 2456.036196] slab_reclaimable 101520 [ 2456.036196] slab_unreclaimable 664160 [ 2456.036196] slab 765680 [ 2456.036196] workingset_refault_anon 0 [ 2456.036196] workingset_refault_file 8354 [ 2456.036196] workingset_activate_anon 0 [ 2456.036196] workingset_activate_file 22 [ 2456.036196] workingset_restore_anon 0 [ 2456.036196] workingset_restore_file 0 [ 2456.036196] workingset_nodereclaim 0 [ 2456.036196] pgscan 11279 [ 2456.036196] pgsteal 8370 [ 2456.036196] pgscan_kswapd 1 [ 2456.036196] pgscan_direct 11278 [ 2456.036196] pgscan_khugepaged 0 [ 2456.036196] pgsteal_kswapd 0 [ 2456.036196] pgsteal_direct 8370 [ 2456.036196] pgsteal_khugepaged 0 [ 2456.036196] pgfault 497721 [ 2456.036196] pgmajfault 27 [ 2456.036196] pgrefill 1372 [ 2456.036196] pgactivate 49712 [ 2456.036196] pgdeactivate 1372 [ 2456.036196] pglazyfree 0 [ 2456.036196] pglazyfreed 0 [ 2456.054026] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10797,uid=0 [ 2456.056120] Memory cgroup out of memory: Killed process 10797 (syz-executor.4) total-vm:93412kB, anon-rss:29204kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:31:24 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:31:24 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) 16:31:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:31:24 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:24 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x0, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:24 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:31:24 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), 0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, 0x0], 0x8, {r1}}, 0x58) 16:31:24 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:31:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:31:24 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:24 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:31:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:31:24 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x0, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:24 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2468.565094] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2468.565883] CPU: 0 PID: 10842 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2468.566503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2468.567086] Call Trace: [ 2468.567285] [ 2468.567457] dump_stack_lvl+0xc1/0xf0 [ 2468.567762] dump_header+0x10a/0xd50 [ 2468.568056] oom_kill_process+0x25d/0x600 [ 2468.568367] out_of_memory+0x35c/0x1660 [ 2468.568670] ? find_held_lock+0x2c/0x110 [ 2468.568985] ? __pfx_out_of_memory+0x10/0x10 [ 2468.569323] ? rcu_read_unlock+0x9/0x60 [ 2468.569630] ? lock_release+0x1e3/0x710 [ 2468.569934] ? lock_is_held_type+0x9f/0x120 [ 2468.570270] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2468.570631] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2468.571019] ? mem_cgroup_iter+0x291/0x710 [ 2468.571351] try_charge_memcg+0xec4/0x12e0 [ 2468.571680] ? lock_is_held_type+0x40/0x120 [ 2468.572004] ? __pfx_try_charge_memcg+0x10/0x10 [ 2468.572355] ? lock_release+0x1e3/0x710 [ 2468.572668] ? __pfx_lock_release+0x10/0x10 [ 2468.572994] ? trace_lock_acquire+0x170/0x1e0 [ 2468.573360] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2468.573724] ? lock_acquire+0x32/0xc0 [ 2468.574026] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2468.574382] charge_memcg+0x85/0x2c0 [ 2468.574680] __mem_cgroup_charge+0x28/0x90 [ 2468.575002] __handle_mm_fault+0x102b/0x31c0 [ 2468.575334] ? lock_acquire.part.0+0xec/0x320 [ 2468.575686] ? lock_is_held_type+0x9f/0x120 [ 2468.576012] ? __pfx___handle_mm_fault+0x10/0x10 [ 2468.576386] handle_mm_fault+0x1b8/0x860 [ 2468.576695] __get_user_pages+0x4d6/0x1060 [ 2468.577015] ? __pfx___get_user_pages+0x10/0x10 [ 2468.577378] ? __pfx_mt_find+0x10/0x10 [ 2468.577680] populate_vma_page_range+0x2e7/0x420 [ 2468.578043] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2468.578432] ? __pfx_find_vma_intersection+0x10/0x10 [ 2468.578815] ? lock_acquire+0x32/0xc0 [ 2468.579109] ? __mm_populate+0x228/0x3a0 [ 2468.579422] __mm_populate+0x102/0x3a0 [ 2468.579725] ? __pfx___mm_populate+0x10/0x10 [ 2468.580066] ? up_write+0x196/0x510 [ 2468.580342] __do_sys_mlockall+0x414/0x4a0 [ 2468.580645] do_syscall_64+0x3f/0x90 [ 2468.580939] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2468.581315] RIP: 0033:0x7fd09934cb19 [ 2468.581591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2468.582869] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2468.583421] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2468.583934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2468.584444] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2468.584949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2468.585480] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2468.586007] [ 2468.586244] memory: usage 307200kB, limit 307200kB, failcnt 10462 [ 2468.586692] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2468.587148] Memory cgroup stats for /syz6: [ 2468.587275] anon 291074048 [ 2468.587275] file 16646144 [ 2468.587275] kernel 6852608 [ 2468.587275] kernel_stack 950272 [ 2468.587275] pagetables 4198400 [ 2468.587275] sec_pagetables 0 [ 2468.587275] percpu 1792 [ 2468.587275] sock 0 [ 2468.587275] vmalloc 0 [ 2468.587275] shmem 0 [ 2468.587275] file_mapped 16646144 [ 2468.587275] file_dirty 0 [ 2468.587275] file_writeback 0 [ 2468.587275] swapcached 0 [ 2468.587275] inactive_anon 269533184 [ 2468.587275] active_anon 0 [ 2468.587275] inactive_file 0 [ 2468.587275] active_file 0 [ 2468.587275] unevictable 38170624 [ 2468.587275] slab_reclaimable 108576 [ 2468.587275] slab_unreclaimable 1008176 [ 2468.587275] slab 1116752 [ 2468.587275] workingset_refault_anon 0 [ 2468.587275] workingset_refault_file 5 [ 2468.587275] workingset_activate_anon 0 [ 2468.587275] workingset_activate_file 0 [ 2468.587275] workingset_restore_anon 0 [ 2468.587275] workingset_restore_file 0 [ 2468.587275] workingset_nodereclaim 0 [ 2468.587275] pgscan 2139 [ 2468.587275] pgsteal 1014 [ 2468.587275] pgscan_kswapd 0 [ 2468.587275] pgscan_direct 2139 [ 2468.587275] pgscan_khugepaged 0 [ 2468.587275] pgsteal_kswapd 0 [ 2468.587275] pgsteal_direct 1014 [ 2468.587275] pgsteal_khugepaged 0 [ 2468.587275] pgfault 1032101 [ 2468.587275] pgmajfault 0 [ 2468.587275] pgrefill 1163 [ 2468.587275] pgactivate 141435 [ 2468.587275] pgdeactivate 1145 [ 2468.587275] pglazyfree 0 [ 2468.587275] pglazyfreed 0 [ 2468.595988] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=10841,uid=0 [ 2468.597051] Memory cgroup out of memory: Killed process 10841 (syz-executor.6) total-vm:93412kB, anon-rss:21160kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2468.787768] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2468.788576] CPU: 0 PID: 10844 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2468.789171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2468.789778] Call Trace: [ 2468.789976] [ 2468.790155] dump_stack_lvl+0xc1/0xf0 [ 2468.790458] dump_header+0x10a/0xd50 [ 2468.790744] oom_kill_process+0x25d/0x600 [ 2468.791068] out_of_memory+0x35c/0x1660 [ 2468.791375] ? find_held_lock+0x2c/0x110 [ 2468.791693] ? __pfx_out_of_memory+0x10/0x10 [ 2468.792026] ? rcu_read_unlock+0x9/0x60 [ 2468.792344] ? lock_release+0x1e3/0x710 [ 2468.792658] ? lock_is_held_type+0x9f/0x120 [ 2468.793007] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2468.793377] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2468.793786] ? mem_cgroup_iter+0x291/0x710 [ 2468.794124] try_charge_memcg+0xec4/0x12e0 [ 2468.794451] ? lock_is_held_type+0x40/0x120 [ 2468.794790] ? __pfx_try_charge_memcg+0x10/0x10 [ 2468.795152] ? lock_release+0x1e3/0x710 [ 2468.795473] ? __pfx_lock_release+0x10/0x10 [ 2468.795820] ? trace_lock_acquire+0x170/0x1e0 [ 2468.796175] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2468.796552] ? lock_acquire+0x32/0xc0 [ 2468.796834] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2468.797211] charge_memcg+0x85/0x2c0 [ 2468.797496] __mem_cgroup_charge+0x28/0x90 [ 2468.797818] __handle_mm_fault+0x102b/0x31c0 [ 2468.798150] ? lock_acquire.part.0+0xec/0x320 [ 2468.798501] ? lock_is_held_type+0x9f/0x120 [ 2468.798828] ? __pfx___handle_mm_fault+0x10/0x10 [ 2468.799206] handle_mm_fault+0x1b8/0x860 [ 2468.799501] __get_user_pages+0x4d6/0x1060 [ 2468.799834] ? __pfx___get_user_pages+0x10/0x10 [ 2468.800171] ? __pfx_mt_find+0x10/0x10 [ 2468.800483] populate_vma_page_range+0x2e7/0x420 [ 2468.800836] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2468.801236] ? __pfx_find_vma_intersection+0x10/0x10 [ 2468.801607] ? lock_acquire+0x32/0xc0 [ 2468.801909] ? __mm_populate+0x228/0x3a0 [ 2468.802231] __mm_populate+0x102/0x3a0 [ 2468.802533] ? __pfx___mm_populate+0x10/0x10 [ 2468.802881] ? up_write+0x196/0x510 [ 2468.803159] __do_sys_mlockall+0x414/0x4a0 [ 2468.803478] do_syscall_64+0x3f/0x90 [ 2468.803771] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2468.804169] RIP: 0033:0x7ff90dfe0b19 [ 2468.804452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2468.805674] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2468.806237] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2468.806762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2468.807281] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2468.807805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2468.808328] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2468.808861] [ 2468.809078] memory: usage 307200kB, limit 307200kB, failcnt 4071 [ 2468.809518] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2468.809971] Memory cgroup stats for /syz4: [ 2468.810092] anon 289349632 [ 2468.810092] file 20451328 [ 2468.810092] kernel 4771840 [ 2468.810092] kernel_stack 622592 [ 2468.810092] pagetables 3002368 [ 2468.810092] sec_pagetables 0 [ 2468.810092] percpu 1152 [ 2468.810092] sock 0 [ 2468.810092] vmalloc 0 [ 2468.810092] shmem 0 [ 2468.810092] file_mapped 20447232 [ 2468.810092] file_dirty 4096 [ 2468.810092] file_writeback 0 [ 2468.810092] swapcached 0 [ 2468.810092] inactive_anon 259604480 [ 2468.810092] active_anon 0 [ 2468.810092] inactive_file 4096 [ 2468.810092] active_file 0 [ 2468.810092] unevictable 50192384 [ 2468.810092] slab_reclaimable 101520 [ 2468.810092] slab_unreclaimable 664160 [ 2468.810092] slab 765680 [ 2468.810092] workingset_refault_anon 0 [ 2468.810092] workingset_refault_file 8354 [ 2468.810092] workingset_activate_anon 0 [ 2468.810092] workingset_activate_file 22 [ 2468.810092] workingset_restore_anon 0 [ 2468.810092] workingset_restore_file 0 [ 2468.810092] workingset_nodereclaim 0 [ 2468.810092] pgscan 11293 [ 2468.810092] pgsteal 8370 [ 2468.810092] pgscan_kswapd 1 [ 2468.810092] pgscan_direct 11292 [ 2468.810092] pgscan_khugepaged 0 [ 2468.810092] pgsteal_kswapd 0 [ 2468.810092] pgsteal_direct 8370 [ 2468.810092] pgsteal_khugepaged 0 [ 2468.810092] pgfault 505345 [ 2468.810092] pgmajfault 27 [ 2468.810092] pgrefill 1387 [ 2468.810092] pgactivate 50647 [ 2468.810092] pgdeactivate 1387 [ 2468.810092] pglazyfree 0 [ 2468.810092] pglazyfreed 0 [ 2468.819054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10838,uid=0 [ 2468.820164] Memory cgroup out of memory: Killed process 10838 (syz-executor.4) total-vm:93412kB, anon-rss:29096kB, file-rss:56320kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:31:38 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:31:38 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:31:38 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:31:38 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:31:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x0, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:38 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:31:38 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:31:38 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:31:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x0, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:31:38 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:31:38 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:31:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:38 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2482.370308] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2482.371608] CPU: 0 PID: 10872 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2482.372636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.373678] Call Trace: [ 2482.374017] [ 2482.374323] dump_stack_lvl+0xc1/0xf0 [ 2482.374859] dump_header+0x10a/0xd50 [ 2482.375343] oom_kill_process+0x25d/0x600 [ 2482.375897] out_of_memory+0x35c/0x1660 [ 2482.376415] ? find_held_lock+0x2c/0x110 [ 2482.376962] ? __pfx_out_of_memory+0x10/0x10 [ 2482.377538] ? rcu_read_unlock+0x9/0x60 [ 2482.378084] ? lock_release+0x1e3/0x710 [ 2482.378600] ? lock_is_held_type+0x9f/0x120 [ 2482.379195] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2482.379839] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2482.380508] ? mem_cgroup_iter+0x291/0x710 [ 2482.381093] try_charge_memcg+0xec4/0x12e0 [ 2482.381650] ? lock_is_held_type+0x40/0x120 [ 2482.382238] ? __pfx_try_charge_memcg+0x10/0x10 [ 2482.382834] ? lock_release+0x1e3/0x710 [ 2482.383380] ? __pfx_lock_release+0x10/0x10 [ 2482.383934] ? trace_lock_acquire+0x170/0x1e0 [ 2482.384550] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2482.385154] ? lock_acquire+0x32/0xc0 [ 2482.385703] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2482.386321] charge_memcg+0x85/0x2c0 [ 2482.386846] __mem_cgroup_charge+0x28/0x90 [ 2482.387387] __handle_mm_fault+0x102b/0x31c0 [ 2482.387946] ? lock_acquire.part.0+0xec/0x320 [ 2482.388535] ? lock_is_held_type+0x9f/0x120 [ 2482.389090] ? __pfx___handle_mm_fault+0x10/0x10 [ 2482.389735] handle_mm_fault+0x1b8/0x860 [ 2482.390252] __get_user_pages+0x4d6/0x1060 [ 2482.390812] ? __pfx___get_user_pages+0x10/0x10 [ 2482.391397] ? __pfx_mt_find+0x10/0x10 [ 2482.391915] populate_vma_page_range+0x2e7/0x420 [ 2482.392517] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2482.393170] ? __pfx_find_vma_intersection+0x10/0x10 [ 2482.393818] ? lock_acquire+0x32/0xc0 [ 2482.394315] ? __mm_populate+0x228/0x3a0 [ 2482.394875] __mm_populate+0x102/0x3a0 [ 2482.395382] ? __pfx___mm_populate+0x10/0x10 [ 2482.395954] ? up_write+0x196/0x510 [ 2482.396433] __do_sys_mlockall+0x414/0x4a0 [ 2482.396968] do_syscall_64+0x3f/0x90 [ 2482.397477] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2482.398132] RIP: 0033:0x7fd09934cb19 [ 2482.398619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.400704] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2482.401619] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2482.402467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2482.403309] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2482.404157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2482.404994] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2482.405885] [ 2482.406385] memory: usage 307200kB, limit 307200kB, failcnt 10550 [ 2482.407158] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2482.407921] Memory cgroup stats for /syz6: [ 2482.408152] anon 291074048 [ 2482.408152] file 16646144 [ 2482.408152] kernel 6852608 [ 2482.408152] kernel_stack 950272 [ 2482.408152] pagetables 4198400 [ 2482.408152] sec_pagetables 0 [ 2482.408152] percpu 1792 [ 2482.408152] sock 0 [ 2482.408152] vmalloc 0 [ 2482.408152] shmem 0 [ 2482.408152] file_mapped 16646144 [ 2482.408152] file_dirty 0 [ 2482.408152] file_writeback 0 [ 2482.408152] swapcached 0 [ 2482.408152] inactive_anon 269533184 [ 2482.408152] active_anon 0 [ 2482.408152] inactive_file 0 [ 2482.408152] active_file 0 [ 2482.408152] unevictable 38187008 [ 2482.408152] slab_reclaimable 108576 [ 2482.408152] slab_unreclaimable 1008176 [ 2482.408152] slab 1116752 [ 2482.408152] workingset_refault_anon 0 [ 2482.408152] workingset_refault_file 5 [ 2482.408152] workingset_activate_anon 0 [ 2482.408152] workingset_activate_file 0 [ 2482.408152] workingset_restore_anon 0 [ 2482.408152] workingset_restore_file 0 [ 2482.408152] workingset_nodereclaim 0 [ 2482.408152] pgscan 2139 [ 2482.408152] pgsteal 1014 [ 2482.408152] pgscan_kswapd 0 [ 2482.408152] pgscan_direct 2139 [ 2482.408152] pgscan_khugepaged 0 [ 2482.408152] pgsteal_kswapd 0 [ 2482.408152] pgsteal_direct 1014 [ 2482.408152] pgsteal_khugepaged 0 [ 2482.408152] pgfault 1037646 [ 2482.408152] pgmajfault 0 [ 2482.408152] pgrefill 1163 [ 2482.408152] pgactivate 141905 [ 2482.408152] pgdeactivate 1145 [ 2482.408152] pglazyfree 0 [ 2482.408152] pglazyfreed 0 [ 2482.423740] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=10864,uid=0 [ 2482.425732] Memory cgroup out of memory: Killed process 10864 (syz-executor.6) total-vm:93412kB, anon-rss:21160kB, file-rss:51840kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2482.590245] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2482.591523] CPU: 1 PID: 10876 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2482.592526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.593537] Call Trace: [ 2482.593948] [ 2482.594323] dump_stack_lvl+0xc1/0xf0 [ 2482.594970] dump_header+0x10a/0xd50 [ 2482.595592] oom_kill_process+0x25d/0x600 [ 2482.596142] out_of_memory+0x35c/0x1660 [ 2482.596798] ? find_held_lock+0x2c/0x110 [ 2482.597341] ? __pfx_out_of_memory+0x10/0x10 [ 2482.598055] ? rcu_read_unlock+0x9/0x60 [ 2482.598607] ? lock_release+0x1e3/0x710 [ 2482.599139] ? lock_is_held_type+0x9f/0x120 [ 2482.599852] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2482.600486] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2482.601350] ? mem_cgroup_iter+0x291/0x710 [ 2482.601953] try_charge_memcg+0xec4/0x12e0 [ 2482.602651] ? lock_is_held_type+0x40/0x120 [ 2482.603239] ? __pfx_try_charge_memcg+0x10/0x10 [ 2482.603988] ? lock_release+0x1e3/0x710 [ 2482.604541] ? __pfx_lock_release+0x10/0x10 [ 2482.605110] ? trace_lock_acquire+0x170/0x1e0 [ 2482.605722] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2482.606490] ? lock_acquire+0x32/0xc0 [ 2482.607119] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2482.607900] charge_memcg+0x85/0x2c0 [ 2482.608519] __mem_cgroup_charge+0x28/0x90 [ 2482.609195] __handle_mm_fault+0x102b/0x31c0 [ 2482.609894] ? lock_acquire.part.0+0xec/0x320 [ 2482.610634] ? lock_is_held_type+0x9f/0x120 [ 2482.611345] ? __pfx___handle_mm_fault+0x10/0x10 [ 2482.612162] handle_mm_fault+0x1b8/0x860 [ 2482.612827] __get_user_pages+0x4d6/0x1060 [ 2482.613568] ? __pfx___get_user_pages+0x10/0x10 [ 2482.614319] ? __pfx_mt_find+0x10/0x10 [ 2482.614973] populate_vma_page_range+0x2e7/0x420 [ 2482.615749] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2482.616572] ? __pfx_find_vma_intersection+0x10/0x10 [ 2482.617406] ? lock_acquire+0x32/0xc0 [ 2482.618047] ? __mm_populate+0x228/0x3a0 [ 2482.618723] __mm_populate+0x102/0x3a0 [ 2482.619367] ? __pfx___mm_populate+0x10/0x10 [ 2482.619953] ? up_write+0x196/0x510 [ 2482.620558] __do_sys_mlockall+0x414/0x4a0 [ 2482.621111] do_syscall_64+0x3f/0x90 [ 2482.621744] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2482.622591] RIP: 0033:0x7ff90dfe0b19 [ 2482.623186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.625942] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2482.626895] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2482.628020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2482.629116] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2482.630232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2482.631324] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2482.632455] [ 2482.632981] memory: usage 307200kB, limit 307200kB, failcnt 4134 [ 2482.633985] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2482.634960] Memory cgroup stats for /syz4: [ 2482.635191] anon 289349632 [ 2482.635191] file 20451328 [ 2482.635191] kernel 4771840 [ 2482.635191] kernel_stack 622592 [ 2482.635191] pagetables 3002368 [ 2482.635191] sec_pagetables 0 [ 2482.635191] percpu 1152 [ 2482.635191] sock 0 [ 2482.635191] vmalloc 0 [ 2482.635191] shmem 0 [ 2482.635191] file_mapped 20447232 [ 2482.635191] file_dirty 0 [ 2482.635191] file_writeback 0 [ 2482.635191] swapcached 0 [ 2482.635191] inactive_anon 259604480 [ 2482.635191] active_anon 0 [ 2482.635191] inactive_file 4096 [ 2482.635191] active_file 0 [ 2482.635191] unevictable 50192384 [ 2482.635191] slab_reclaimable 101520 [ 2482.635191] slab_unreclaimable 664160 [ 2482.635191] slab 765680 [ 2482.635191] workingset_refault_anon 0 [ 2482.635191] workingset_refault_file 8354 [ 2482.635191] workingset_activate_anon 0 [ 2482.635191] workingset_activate_file 22 [ 2482.635191] workingset_restore_anon 0 [ 2482.635191] workingset_restore_file 0 [ 2482.635191] workingset_nodereclaim 0 [ 2482.635191] pgscan 11305 [ 2482.635191] pgsteal 8370 [ 2482.635191] pgscan_kswapd 1 [ 2482.635191] pgscan_direct 11304 [ 2482.635191] pgscan_khugepaged 0 [ 2482.635191] pgsteal_kswapd 0 [ 2482.635191] pgsteal_direct 8370 [ 2482.635191] pgsteal_khugepaged 0 [ 2482.635191] pgfault 512969 [ 2482.635191] pgmajfault 27 [ 2482.635191] pgrefill 1399 [ 2482.635191] pgactivate 51107 [ 2482.635191] pgdeactivate 1399 [ 2482.635191] pglazyfree 0 [ 2482.635191] pglazyfreed 0 [ 2482.653458] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10871,uid=0 [ 2482.656071] Memory cgroup out of memory: Killed process 10871 (syz-executor.4) total-vm:93412kB, anon-rss:29204kB, file-rss:56352kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:31:52 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:31:52 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:31:52 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:52 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:31:52 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:31:52 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:31:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:52 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:31:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:52 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:52 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:31:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:52 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:31:52 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x0, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:31:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:31:52 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) [ 2496.267986] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2496.268844] CPU: 1 PID: 10913 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2496.269539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2496.270221] Call Trace: [ 2496.270446] [ 2496.270647] dump_stack_lvl+0xc1/0xf0 [ 2496.270993] dump_header+0x10a/0xd50 [ 2496.271326] oom_kill_process+0x25d/0x600 [ 2496.271692] out_of_memory+0x35c/0x1660 [ 2496.272047] ? find_held_lock+0x2c/0x110 [ 2496.272410] ? __pfx_out_of_memory+0x10/0x10 [ 2496.272783] ? rcu_read_unlock+0x9/0x60 [ 2496.273136] ? lock_release+0x1e3/0x710 [ 2496.273482] ? lock_is_held_type+0x9f/0x120 [ 2496.273885] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2496.274304] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2496.274772] ? mem_cgroup_iter+0x291/0x710 [ 2496.275148] try_charge_memcg+0xec4/0x12e0 [ 2496.275513] ? lock_is_held_type+0x40/0x120 [ 2496.275893] ? __pfx_try_charge_memcg+0x10/0x10 [ 2496.276308] ? lock_release+0x1e3/0x710 [ 2496.276666] ? __pfx_lock_release+0x10/0x10 [ 2496.277048] ? trace_lock_acquire+0x170/0x1e0 [ 2496.277454] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2496.277780] ? lock_acquire+0x32/0xc0 [ 2496.278118] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2496.278537] charge_memcg+0x85/0x2c0 [ 2496.278881] __mem_cgroup_charge+0x28/0x90 [ 2496.279251] __handle_mm_fault+0x102b/0x31c0 [ 2496.279622] ? lock_acquire.part.0+0xec/0x320 [ 2496.280018] ? lock_is_held_type+0x9f/0x120 [ 2496.280395] ? __pfx___handle_mm_fault+0x10/0x10 [ 2496.280828] handle_mm_fault+0x1b8/0x860 [ 2496.281184] __get_user_pages+0x4d6/0x1060 [ 2496.281569] ? __pfx___get_user_pages+0x10/0x10 [ 2496.281880] ? __pfx_mt_find+0x10/0x10 [ 2496.282227] populate_vma_page_range+0x2e7/0x420 [ 2496.282640] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2496.282980] ? __pfx_find_vma_intersection+0x10/0x10 [ 2496.283412] ? lock_acquire+0x32/0xc0 [ 2496.283674] ? __mm_populate+0x228/0x3a0 [ 2496.284045] __mm_populate+0x102/0x3a0 [ 2496.284310] ? __pfx___mm_populate+0x10/0x10 [ 2496.284689] ? up_write+0x196/0x510 [ 2496.284937] __do_sys_mlockall+0x414/0x4a0 [ 2496.285315] do_syscall_64+0x3f/0x90 [ 2496.285587] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2496.286031] RIP: 0033:0x7fd09934cb19 [ 2496.286273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2496.287789] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2496.288264] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2496.288845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2496.289449] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2496.290045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2496.290651] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2496.291263] [ 2496.292233] memory: usage 307200kB, limit 307200kB, failcnt 10596 [ 2496.292921] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2496.293428] Memory cgroup stats for /syz6: [ 2496.293567] anon 291074048 [ 2496.293567] file 16646144 [ 2496.293567] kernel 6852608 [ 2496.293567] kernel_stack 950272 [ 2496.293567] pagetables 4198400 [ 2496.293567] sec_pagetables 0 [ 2496.293567] percpu 1792 [ 2496.293567] sock 0 [ 2496.293567] vmalloc 0 [ 2496.293567] shmem 0 [ 2496.293567] file_mapped 16646144 [ 2496.293567] file_dirty 0 [ 2496.293567] file_writeback 0 [ 2496.293567] swapcached 0 [ 2496.293567] inactive_anon 269533184 [ 2496.293567] active_anon 0 [ 2496.293567] inactive_file 0 [ 2496.293567] active_file 0 [ 2496.293567] unevictable 38187008 [ 2496.293567] slab_reclaimable 108576 [ 2496.293567] slab_unreclaimable 1008176 [ 2496.293567] slab 1116752 [ 2496.293567] workingset_refault_anon 0 [ 2496.293567] workingset_refault_file 5 [ 2496.293567] workingset_activate_anon 0 [ 2496.293567] workingset_activate_file 0 [ 2496.293567] workingset_restore_anon 0 [ 2496.293567] workingset_restore_file 0 [ 2496.293567] workingset_nodereclaim 0 [ 2496.293567] pgscan 2139 [ 2496.293567] pgsteal 1014 [ 2496.293567] pgscan_kswapd 0 [ 2496.293567] pgscan_direct 2139 [ 2496.293567] pgscan_khugepaged 0 [ 2496.293567] pgsteal_kswapd 0 [ 2496.293567] pgsteal_direct 1014 [ 2496.293567] pgsteal_khugepaged 0 [ 2496.293567] pgfault 1043191 [ 2496.293567] pgmajfault 0 [ 2496.293567] pgrefill 1163 [ 2496.293567] pgactivate 142471 [ 2496.293567] pgdeactivate 1145 [ 2496.293567] pglazyfree 0 [ 2496.293567] pglazyfreed 0 [ 2496.302486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=10912,uid=0 [ 2496.303457] Memory cgroup out of memory: Killed process 10912 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2496.440551] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2496.441249] CPU: 1 PID: 10911 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2496.441796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2496.442304] Call Trace: [ 2496.442479] [ 2496.442640] dump_stack_lvl+0xc1/0xf0 [ 2496.442913] dump_header+0x10a/0xd50 [ 2496.443172] oom_kill_process+0x25d/0x600 [ 2496.443456] out_of_memory+0x35c/0x1660 [ 2496.443723] ? find_held_lock+0x2c/0x110 [ 2496.443999] ? __pfx_out_of_memory+0x10/0x10 [ 2496.444289] ? rcu_read_unlock+0x9/0x60 [ 2496.444570] ? lock_release+0x1e3/0x710 [ 2496.444847] ? lock_is_held_type+0x9f/0x120 [ 2496.445143] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2496.445460] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2496.445823] ? mem_cgroup_iter+0x291/0x710 [ 2496.446123] try_charge_memcg+0xec4/0x12e0 [ 2496.446410] ? lock_is_held_type+0x40/0x120 [ 2496.446701] ? __pfx_try_charge_memcg+0x10/0x10 [ 2496.447017] ? lock_release+0x1e3/0x710 [ 2496.447292] ? __pfx_lock_release+0x10/0x10 [ 2496.447580] ? trace_lock_acquire+0x170/0x1e0 [ 2496.447888] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2496.448209] ? lock_acquire+0x32/0xc0 [ 2496.448473] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2496.448805] charge_memcg+0x85/0x2c0 [ 2496.449070] __mem_cgroup_charge+0x28/0x90 [ 2496.449356] __handle_mm_fault+0x102b/0x31c0 [ 2496.449656] ? lock_acquire.part.0+0xec/0x320 [ 2496.449961] ? lock_is_held_type+0x9f/0x120 [ 2496.450247] ? __pfx___handle_mm_fault+0x10/0x10 [ 2496.450575] handle_mm_fault+0x1b8/0x860 [ 2496.450851] __get_user_pages+0x4d6/0x1060 [ 2496.451149] ? __pfx___get_user_pages+0x10/0x10 [ 2496.451460] ? __pfx_mt_find+0x10/0x10 [ 2496.451735] populate_vma_page_range+0x2e7/0x420 [ 2496.452053] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2496.452401] ? __pfx_find_vma_intersection+0x10/0x10 [ 2496.452739] ? lock_acquire+0x32/0xc0 [ 2496.453005] ? __mm_populate+0x228/0x3a0 [ 2496.453286] __mm_populate+0x102/0x3a0 [ 2496.453552] ? __pfx___mm_populate+0x10/0x10 [ 2496.453869] ? up_write+0x196/0x510 [ 2496.454122] __do_sys_mlockall+0x414/0x4a0 [ 2496.454410] do_syscall_64+0x3f/0x90 [ 2496.454670] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2496.455014] RIP: 0033:0x7ff90dfe0b19 [ 2496.455261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2496.456369] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2496.456856] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2496.457310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2496.457762] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2496.458214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2496.458660] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2496.459122] [ 2496.459362] memory: usage 307200kB, limit 307200kB, failcnt 4196 [ 2496.459755] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2496.460161] Memory cgroup stats for /syz4: [ 2496.460282] anon 289349632 [ 2496.460282] file 20451328 [ 2496.460282] kernel 4771840 [ 2496.460282] kernel_stack 622592 [ 2496.460282] pagetables 3002368 [ 2496.460282] sec_pagetables 0 [ 2496.460282] percpu 1152 [ 2496.460282] sock 0 [ 2496.460282] vmalloc 0 [ 2496.460282] shmem 0 [ 2496.460282] file_mapped 20447232 [ 2496.460282] file_dirty 4096 [ 2496.460282] file_writeback 0 [ 2496.460282] swapcached 0 [ 2496.460282] inactive_anon 259604480 [ 2496.460282] active_anon 0 [ 2496.460282] inactive_file 0 [ 2496.460282] active_file 4096 [ 2496.460282] unevictable 50192384 [ 2496.460282] slab_reclaimable 101520 [ 2496.460282] slab_unreclaimable 664160 [ 2496.460282] slab 765680 [ 2496.460282] workingset_refault_anon 0 [ 2496.460282] workingset_refault_file 8354 [ 2496.460282] workingset_activate_anon 0 [ 2496.460282] workingset_activate_file 22 [ 2496.460282] workingset_restore_anon 0 [ 2496.460282] workingset_restore_file 0 [ 2496.460282] workingset_nodereclaim 0 [ 2496.460282] pgscan 11316 [ 2496.460282] pgsteal 8370 [ 2496.460282] pgscan_kswapd 1 [ 2496.460282] pgscan_direct 11315 [ 2496.460282] pgscan_khugepaged 0 [ 2496.460282] pgsteal_kswapd 0 [ 2496.460282] pgsteal_direct 8370 [ 2496.460282] pgsteal_khugepaged 0 [ 2496.460282] pgfault 520594 [ 2496.460282] pgmajfault 27 [ 2496.460282] pgrefill 1410 [ 2496.460282] pgactivate 51844 [ 2496.460282] pgdeactivate 1410 [ 2496.460282] pglazyfree 0 [ 2496.460282] pglazyfreed 0 [ 2496.468121] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10905,uid=0 [ 2496.469104] Memory cgroup out of memory: Killed process 10905 (syz-executor.4) total-vm:93412kB, anon-rss:29204kB, file-rss:56320kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:32:06 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:32:06 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x0, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:32:06 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:32:06 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) clock_gettime(0x5, &(0x7f0000000180)) 16:32:06 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:32:06 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:32:06 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:32:06 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:32:07 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:32:07 executing program 7: mlockall(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:32:07 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:32:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:32:07 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x0, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:32:07 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:32:07 executing program 7: mlockall(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:32:07 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) [ 2511.016363] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2511.017072] CPU: 0 PID: 10953 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2511.017637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.018227] Call Trace: [ 2511.018417] [ 2511.018586] dump_stack_lvl+0xc1/0xf0 [ 2511.018878] dump_header+0x10a/0xd50 [ 2511.019164] oom_kill_process+0x25d/0x600 [ 2511.019468] out_of_memory+0x35c/0x1660 [ 2511.019768] ? find_held_lock+0x2c/0x110 [ 2511.020062] ? __pfx_out_of_memory+0x10/0x10 [ 2511.020366] ? rcu_read_unlock+0x9/0x60 [ 2511.020651] ? lock_release+0x1e3/0x710 [ 2511.020937] ? lock_is_held_type+0x9f/0x120 [ 2511.021243] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2511.021573] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2511.021954] ? mem_cgroup_iter+0x291/0x710 [ 2511.022255] try_charge_memcg+0xec4/0x12e0 [ 2511.022561] ? lock_is_held_type+0x40/0x120 [ 2511.022865] ? __pfx_try_charge_memcg+0x10/0x10 [ 2511.023193] ? lock_release+0x1e3/0x710 [ 2511.023476] ? __pfx_lock_release+0x10/0x10 [ 2511.023777] ? trace_lock_acquire+0x170/0x1e0 [ 2511.024096] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2511.024423] ? lock_acquire+0x32/0xc0 [ 2511.024696] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2511.025042] charge_memcg+0x85/0x2c0 [ 2511.025306] __mem_cgroup_charge+0x28/0x90 [ 2511.025594] __handle_mm_fault+0x102b/0x31c0 [ 2511.025917] ? lock_acquire.part.0+0xec/0x320 [ 2511.026260] ? lock_is_held_type+0x9f/0x120 [ 2511.026574] ? __pfx___handle_mm_fault+0x10/0x10 [ 2511.026950] handle_mm_fault+0x1b8/0x860 [ 2511.027247] __get_user_pages+0x4d6/0x1060 [ 2511.027575] ? __pfx___get_user_pages+0x10/0x10 [ 2511.027922] ? __pfx_mt_find+0x10/0x10 [ 2511.028222] populate_vma_page_range+0x2e7/0x420 [ 2511.028584] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2511.028955] ? __pfx_find_vma_intersection+0x10/0x10 [ 2511.029331] ? lock_acquire+0x32/0xc0 [ 2511.029623] ? __mm_populate+0x228/0x3a0 [ 2511.029944] __mm_populate+0x102/0x3a0 [ 2511.030234] ? __pfx___mm_populate+0x10/0x10 [ 2511.030559] ? up_write+0x196/0x510 [ 2511.030832] __do_sys_mlockall+0x414/0x4a0 [ 2511.031139] do_syscall_64+0x3f/0x90 [ 2511.031428] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2511.031811] RIP: 0033:0x7fd09934cb19 [ 2511.032083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.033343] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2511.033888] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2511.034391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2511.034900] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2511.035403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2511.035909] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2511.036424] [ 2511.036738] memory: usage 307200kB, limit 307200kB, failcnt 10671 [ 2511.037191] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2511.037616] Memory cgroup stats for /syz6: [ 2511.037767] anon 291074048 [ 2511.037767] file 16646144 [ 2511.037767] kernel 6852608 [ 2511.037767] kernel_stack 950272 [ 2511.037767] pagetables 4198400 [ 2511.037767] sec_pagetables 0 [ 2511.037767] percpu 1792 [ 2511.037767] sock 0 [ 2511.037767] vmalloc 0 [ 2511.037767] shmem 0 [ 2511.037767] file_mapped 16646144 [ 2511.037767] file_dirty 0 [ 2511.037767] file_writeback 0 [ 2511.037767] swapcached 0 [ 2511.037767] inactive_anon 269533184 [ 2511.037767] active_anon 0 [ 2511.037767] inactive_file 0 [ 2511.037767] active_file 0 [ 2511.037767] unevictable 38187008 [ 2511.037767] slab_reclaimable 108576 [ 2511.037767] slab_unreclaimable 1008176 [ 2511.037767] slab 1116752 [ 2511.037767] workingset_refault_anon 0 [ 2511.037767] workingset_refault_file 5 [ 2511.037767] workingset_activate_anon 0 [ 2511.037767] workingset_activate_file 0 [ 2511.037767] workingset_restore_anon 0 [ 2511.037767] workingset_restore_file 0 [ 2511.037767] workingset_nodereclaim 0 [ 2511.037767] pgscan 2139 [ 2511.037767] pgsteal 1014 [ 2511.037767] pgscan_kswapd 0 [ 2511.037767] pgscan_direct 2139 [ 2511.037767] pgscan_khugepaged 0 [ 2511.037767] pgsteal_kswapd 0 [ 2511.037767] pgsteal_direct 1014 [ 2511.037767] pgsteal_khugepaged 0 [ 2511.037767] pgfault 1048736 [ 2511.037767] pgmajfault 0 [ 2511.037767] pgrefill 1163 [ 2511.037767] pgactivate 143204 [ 2511.037767] pgdeactivate 1145 [ 2511.037767] pglazyfree 0 [ 2511.037767] pglazyfreed 0 [ 2511.046541] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=10950,uid=0 [ 2511.047615] Memory cgroup out of memory: Killed process 10950 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2511.279183] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2511.280481] CPU: 1 PID: 10958 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2511.281517] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.282576] Call Trace: [ 2511.282930] [ 2511.283242] dump_stack_lvl+0xc1/0xf0 [ 2511.283775] dump_header+0x10a/0xd50 [ 2511.284303] oom_kill_process+0x25d/0x600 [ 2511.284859] out_of_memory+0x35c/0x1660 [ 2511.285403] ? find_held_lock+0x2c/0x110 [ 2511.285966] ? __pfx_out_of_memory+0x10/0x10 [ 2511.286549] ? rcu_read_unlock+0x9/0x60 [ 2511.287099] ? lock_release+0x1e3/0x710 [ 2511.287646] ? lock_is_held_type+0x9f/0x120 [ 2511.288233] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2511.288905] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2511.289640] ? mem_cgroup_iter+0x291/0x710 [ 2511.290255] try_charge_memcg+0xec4/0x12e0 [ 2511.290853] ? lock_is_held_type+0x40/0x120 [ 2511.291457] ? __pfx_try_charge_memcg+0x10/0x10 [ 2511.292098] ? lock_release+0x1e3/0x710 [ 2511.292662] ? __pfx_lock_release+0x10/0x10 [ 2511.293270] ? trace_lock_acquire+0x170/0x1e0 [ 2511.293930] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2511.294588] ? lock_acquire+0x32/0xc0 [ 2511.295129] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2511.295797] charge_memcg+0x85/0x2c0 [ 2511.296335] __mem_cgroup_charge+0x28/0x90 [ 2511.296921] __handle_mm_fault+0x102b/0x31c0 [ 2511.297531] ? lock_acquire.part.0+0xec/0x320 [ 2511.298176] ? lock_is_held_type+0x9f/0x120 [ 2511.298770] ? __pfx___handle_mm_fault+0x10/0x10 [ 2511.299451] handle_mm_fault+0x1b8/0x860 [ 2511.300013] __get_user_pages+0x4d6/0x1060 [ 2511.300622] ? __pfx___get_user_pages+0x10/0x10 [ 2511.301264] ? __pfx_mt_find+0x10/0x10 [ 2511.301832] populate_vma_page_range+0x2e7/0x420 [ 2511.302498] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2511.303207] ? __pfx_find_vma_intersection+0x10/0x10 [ 2511.303909] ? lock_acquire+0x32/0xc0 [ 2511.304451] ? __mm_populate+0x228/0x3a0 [ 2511.305028] __mm_populate+0x102/0x3a0 [ 2511.305567] ? __pfx___mm_populate+0x10/0x10 [ 2511.306165] ? up_write+0x196/0x510 [ 2511.306643] __do_sys_mlockall+0x414/0x4a0 [ 2511.307187] do_syscall_64+0x3f/0x90 [ 2511.307674] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2511.308341] RIP: 0033:0x7ff90dfe0b19 [ 2511.308816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.310995] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2511.311925] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2511.312809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2511.313676] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2511.314557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2511.315425] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2511.316327] [ 2511.316778] memory: usage 307200kB, limit 307200kB, failcnt 4270 [ 2511.317560] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2511.318350] Memory cgroup stats for /syz4: [ 2511.318571] anon 289349632 [ 2511.318571] file 20451328 [ 2511.318571] kernel 4771840 [ 2511.318571] kernel_stack 622592 [ 2511.318571] pagetables 3002368 [ 2511.318571] sec_pagetables 0 [ 2511.318571] percpu 1152 [ 2511.318571] sock 0 [ 2511.318571] vmalloc 0 [ 2511.318571] shmem 0 [ 2511.318571] file_mapped 20447232 [ 2511.318571] file_dirty 0 [ 2511.318571] file_writeback 0 [ 2511.318571] swapcached 0 [ 2511.318571] inactive_anon 259604480 [ 2511.318571] active_anon 0 [ 2511.318571] inactive_file 4096 [ 2511.318571] active_file 0 [ 2511.318571] unevictable 50192384 [ 2511.318571] slab_reclaimable 101520 [ 2511.318571] slab_unreclaimable 664160 [ 2511.318571] slab 765680 [ 2511.318571] workingset_refault_anon 0 [ 2511.318571] workingset_refault_file 8354 [ 2511.318571] workingset_activate_anon 0 [ 2511.318571] workingset_activate_file 22 [ 2511.318571] workingset_restore_anon 0 [ 2511.318571] workingset_restore_file 0 [ 2511.318571] workingset_nodereclaim 0 [ 2511.318571] pgscan 11326 [ 2511.318571] pgsteal 8370 [ 2511.318571] pgscan_kswapd 1 [ 2511.318571] pgscan_direct 11325 [ 2511.318571] pgscan_khugepaged 0 [ 2511.318571] pgsteal_kswapd 0 [ 2511.318571] pgsteal_direct 8370 [ 2511.318571] pgsteal_khugepaged 0 [ 2511.318571] pgfault 528218 [ 2511.318571] pgmajfault 27 [ 2511.318571] pgrefill 1422 [ 2511.318571] pgactivate 52954 [ 2511.318571] pgdeactivate 1422 [ 2511.318571] pglazyfree 0 [ 2511.318571] pglazyfreed 0 [ 2511.335077] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10952,uid=0 [ 2511.337223] Memory cgroup out of memory: Killed process 10952 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:32:20 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:32:20 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:32:20 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:32:20 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:32:20 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:32:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:32:20 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, 0x0, 0x0, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:32:20 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:32:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:32:20 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:32:20 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:32:20 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:32:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:32:20 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:32:20 executing program 7: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:32:20 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) [ 2524.566080] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2524.566838] CPU: 1 PID: 10994 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2524.567407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2524.567972] Call Trace: [ 2524.568163] [ 2524.568330] dump_stack_lvl+0xc1/0xf0 [ 2524.568620] dump_header+0x10a/0xd50 [ 2524.568898] oom_kill_process+0x25d/0x600 [ 2524.569194] out_of_memory+0x35c/0x1660 [ 2524.569487] ? find_held_lock+0x2c/0x110 [ 2524.569782] ? __pfx_out_of_memory+0x10/0x10 [ 2524.570105] ? rcu_read_unlock+0x9/0x60 [ 2524.570410] ? lock_release+0x1e3/0x710 [ 2524.570705] ? lock_is_held_type+0x9f/0x120 [ 2524.571026] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2524.571368] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2524.571753] ? mem_cgroup_iter+0x291/0x710 [ 2524.572068] try_charge_memcg+0xec4/0x12e0 [ 2524.572382] ? lock_is_held_type+0x40/0x120 [ 2524.572704] ? __pfx_try_charge_memcg+0x10/0x10 [ 2524.573049] ? lock_release+0x1e3/0x710 [ 2524.573347] ? __pfx_lock_release+0x10/0x10 [ 2524.573661] ? trace_lock_acquire+0x170/0x1e0 [ 2524.574001] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2524.574346] ? lock_acquire+0x32/0xc0 [ 2524.574624] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2524.574982] charge_memcg+0x85/0x2c0 [ 2524.575262] __mem_cgroup_charge+0x28/0x90 [ 2524.575565] __handle_mm_fault+0x102b/0x31c0 [ 2524.575878] ? lock_acquire.part.0+0xec/0x320 [ 2524.576212] ? lock_is_held_type+0x9f/0x120 [ 2524.576522] ? __pfx___handle_mm_fault+0x10/0x10 [ 2524.576880] handle_mm_fault+0x1b8/0x860 [ 2524.577172] __get_user_pages+0x4d6/0x1060 [ 2524.577493] ? __pfx___get_user_pages+0x10/0x10 [ 2524.577830] ? __pfx_mt_find+0x10/0x10 [ 2524.578140] populate_vma_page_range+0x2e7/0x420 [ 2524.578482] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2524.578854] ? __pfx_find_vma_intersection+0x10/0x10 [ 2524.579218] ? lock_acquire+0x32/0xc0 [ 2524.579498] ? __mm_populate+0x228/0x3a0 [ 2524.579805] __mm_populate+0x102/0x3a0 [ 2524.580090] ? __pfx___mm_populate+0x10/0x10 [ 2524.580409] ? up_write+0x196/0x510 [ 2524.580680] __do_sys_mlockall+0x414/0x4a0 [ 2524.580994] do_syscall_64+0x3f/0x90 [ 2524.581276] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2524.581652] RIP: 0033:0x7fd09934cb19 [ 2524.581919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2524.583148] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2524.583668] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2524.584159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2524.584647] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2524.585141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2524.585629] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2524.586153] [ 2524.586383] memory: usage 307200kB, limit 307200kB, failcnt 10753 [ 2524.586867] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2524.587295] Memory cgroup stats for /syz6: [ 2524.587422] anon 291074048 [ 2524.587422] file 16646144 [ 2524.587422] kernel 6852608 [ 2524.587422] kernel_stack 950272 [ 2524.587422] pagetables 4198400 [ 2524.587422] sec_pagetables 0 [ 2524.587422] percpu 1792 [ 2524.587422] sock 0 [ 2524.587422] vmalloc 0 [ 2524.587422] shmem 0 [ 2524.587422] file_mapped 16646144 [ 2524.587422] file_dirty 0 [ 2524.587422] file_writeback 0 [ 2524.587422] swapcached 0 [ 2524.587422] inactive_anon 269533184 [ 2524.587422] active_anon 0 [ 2524.587422] inactive_file 0 [ 2524.587422] active_file 0 [ 2524.587422] unevictable 38154240 [ 2524.587422] slab_reclaimable 108576 [ 2524.587422] slab_unreclaimable 1008176 [ 2524.587422] slab 1116752 [ 2524.587422] workingset_refault_anon 0 [ 2524.587422] workingset_refault_file 5 [ 2524.587422] workingset_activate_anon 0 [ 2524.587422] workingset_activate_file 0 [ 2524.587422] workingset_restore_anon 0 [ 2524.587422] workingset_restore_file 0 [ 2524.587422] workingset_nodereclaim 0 [ 2524.587422] pgscan 2139 [ 2524.587422] pgsteal 1014 [ 2524.587422] pgscan_kswapd 0 [ 2524.587422] pgscan_direct 2139 [ 2524.587422] pgscan_khugepaged 0 [ 2524.587422] pgsteal_kswapd 0 [ 2524.587422] pgsteal_direct 1014 [ 2524.587422] pgsteal_khugepaged 0 [ 2524.587422] pgfault 1054281 [ 2524.587422] pgmajfault 0 [ 2524.587422] pgrefill 1163 [ 2524.587422] pgactivate 144061 [ 2524.587422] pgdeactivate 1145 [ 2524.587422] pglazyfree 0 [ 2524.587422] pglazyfreed 0 [ 2524.595906] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=10993,uid=0 [ 2524.596930] Memory cgroup out of memory: Killed process 10993 (syz-executor.6) total-vm:93412kB, anon-rss:21160kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2524.831765] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2524.832480] CPU: 1 PID: 10985 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2524.833024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2524.833563] Call Trace: [ 2524.833744] [ 2524.833904] dump_stack_lvl+0xc1/0xf0 [ 2524.834203] dump_header+0x10a/0xd50 [ 2524.834468] oom_kill_process+0x25d/0x600 [ 2524.834756] out_of_memory+0x35c/0x1660 [ 2524.835034] ? find_held_lock+0x2c/0x110 [ 2524.835320] ? __pfx_out_of_memory+0x10/0x10 [ 2524.835621] ? rcu_read_unlock+0x9/0x60 [ 2524.835911] ? lock_release+0x1e3/0x710 [ 2524.836190] ? lock_is_held_type+0x9f/0x120 [ 2524.836500] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2524.836835] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2524.837201] ? mem_cgroup_iter+0x291/0x710 [ 2524.837510] try_charge_memcg+0xec4/0x12e0 [ 2524.837809] ? lock_is_held_type+0x40/0x120 [ 2524.838116] ? __pfx_try_charge_memcg+0x10/0x10 [ 2524.838441] ? lock_release+0x1e3/0x710 [ 2524.838727] ? __pfx_lock_release+0x10/0x10 [ 2524.839044] ? trace_lock_acquire+0x170/0x1e0 [ 2524.839379] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2524.839723] ? lock_acquire+0x32/0xc0 [ 2524.839992] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2524.840347] charge_memcg+0x85/0x2c0 [ 2524.840619] __mem_cgroup_charge+0x28/0x90 [ 2524.840926] __handle_mm_fault+0x102b/0x31c0 [ 2524.841226] ? lock_acquire.part.0+0xec/0x320 [ 2524.841559] ? lock_is_held_type+0x9f/0x120 [ 2524.841862] ? __pfx___handle_mm_fault+0x10/0x10 [ 2524.842241] handle_mm_fault+0x1b8/0x860 [ 2524.842537] __get_user_pages+0x4d6/0x1060 [ 2524.842856] ? __pfx___get_user_pages+0x10/0x10 [ 2524.843198] ? __pfx_mt_find+0x10/0x10 [ 2524.843493] populate_vma_page_range+0x2e7/0x420 [ 2524.843843] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2524.844220] ? __pfx_find_vma_intersection+0x10/0x10 [ 2524.844591] ? lock_acquire+0x32/0xc0 [ 2524.844880] ? __mm_populate+0x228/0x3a0 [ 2524.845185] __mm_populate+0x102/0x3a0 [ 2524.845476] ? __pfx___mm_populate+0x10/0x10 [ 2524.845802] ? up_write+0x196/0x510 [ 2524.846078] __do_sys_mlockall+0x414/0x4a0 [ 2524.846389] do_syscall_64+0x3f/0x90 [ 2524.846667] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2524.847048] RIP: 0033:0x7ff90dfe0b19 [ 2524.847315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2524.848566] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2524.849209] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2524.849756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2524.850427] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2524.850918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2524.851541] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2524.852049] [ 2524.853000] memory: usage 307200kB, limit 307200kB, failcnt 4351 [ 2524.853574] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2524.854211] Memory cgroup stats for /syz4: [ 2524.854342] anon 289349632 [ 2524.854342] file 20451328 [ 2524.854342] kernel 4771840 [ 2524.854342] kernel_stack 622592 [ 2524.854342] pagetables 3002368 [ 2524.854342] sec_pagetables 0 [ 2524.854342] percpu 1152 [ 2524.854342] sock 0 [ 2524.854342] vmalloc 0 [ 2524.854342] shmem 0 [ 2524.854342] file_mapped 20447232 [ 2524.854342] file_dirty 0 [ 2524.854342] file_writeback 0 [ 2524.854342] swapcached 0 [ 2524.854342] inactive_anon 259604480 [ 2524.854342] active_anon 0 [ 2524.854342] inactive_file 4096 [ 2524.854342] active_file 0 [ 2524.854342] unevictable 50192384 [ 2524.854342] slab_reclaimable 101520 [ 2524.854342] slab_unreclaimable 664160 [ 2524.854342] slab 765680 [ 2524.854342] workingset_refault_anon 0 [ 2524.854342] workingset_refault_file 8354 [ 2524.854342] workingset_activate_anon 0 [ 2524.854342] workingset_activate_file 22 [ 2524.854342] workingset_restore_anon 0 [ 2524.854342] workingset_restore_file 0 [ 2524.854342] workingset_nodereclaim 0 [ 2524.854342] pgscan 11341 [ 2524.854342] pgsteal 8370 [ 2524.854342] pgscan_kswapd 1 [ 2524.854342] pgscan_direct 11340 [ 2524.854342] pgscan_khugepaged 0 [ 2524.854342] pgsteal_kswapd 0 [ 2524.854342] pgsteal_direct 8370 [ 2524.854342] pgsteal_khugepaged 0 [ 2524.854342] pgfault 535842 [ 2524.854342] pgmajfault 27 [ 2524.854342] pgrefill 1438 [ 2524.854342] pgactivate 53683 [ 2524.854342] pgdeactivate 1438 [ 2524.854342] pglazyfree 0 [ 2524.854342] pglazyfreed 0 [ 2524.863548] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=10983,uid=0 [ 2524.864723] Memory cgroup out of memory: Killed process 10983 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56320kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:32:35 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:32:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:32:35 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:32:35 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:32:35 executing program 7: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:32:35 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:32:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:32:35 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, 0x0, 0x0, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:32:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:32:35 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:32:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:32:35 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:32:35 executing program 7: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:32:35 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:32:35 executing program 3: mlockall(0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:32:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:32:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:32:35 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) [ 2539.508384] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2539.509669] CPU: 1 PID: 11033 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2539.510704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2539.511715] Call Trace: [ 2539.512053] [ 2539.512350] dump_stack_lvl+0xc1/0xf0 [ 2539.512869] dump_header+0x10a/0xd50 [ 2539.513365] oom_kill_process+0x25d/0x600 [ 2539.513905] out_of_memory+0x35c/0x1660 [ 2539.514457] ? find_held_lock+0x2c/0x110 [ 2539.514992] ? __pfx_out_of_memory+0x10/0x10 [ 2539.515559] ? rcu_read_unlock+0x9/0x60 [ 2539.516095] ? lock_release+0x1e3/0x710 [ 2539.516623] ? lock_is_held_type+0x9f/0x120 [ 2539.517198] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2539.517815] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2539.518516] ? mem_cgroup_iter+0x291/0x710 [ 2539.519087] try_charge_memcg+0xec4/0x12e0 [ 2539.519645] ? lock_is_held_type+0x40/0x120 [ 2539.520214] ? __pfx_try_charge_memcg+0x10/0x10 [ 2539.520825] ? lock_release+0x1e3/0x710 [ 2539.521354] ? __pfx_lock_release+0x10/0x10 [ 2539.521915] ? trace_lock_acquire+0x170/0x1e0 [ 2539.522522] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2539.523149] ? lock_acquire+0x32/0xc0 [ 2539.523665] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2539.524302] charge_memcg+0x85/0x2c0 [ 2539.524813] __mem_cgroup_charge+0x28/0x90 [ 2539.525356] __handle_mm_fault+0x102b/0x31c0 [ 2539.525920] ? lock_acquire.part.0+0xec/0x320 [ 2539.526538] ? lock_is_held_type+0x9f/0x120 [ 2539.527106] ? __pfx___handle_mm_fault+0x10/0x10 [ 2539.527766] handle_mm_fault+0x1b8/0x860 [ 2539.528297] __get_user_pages+0x4d6/0x1060 [ 2539.528864] ? __pfx___get_user_pages+0x10/0x10 [ 2539.529472] ? __pfx_mt_find+0x10/0x10 [ 2539.529994] populate_vma_page_range+0x2e7/0x420 [ 2539.530677] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2539.531346] ? __pfx_find_vma_intersection+0x10/0x10 [ 2539.532000] ? lock_acquire+0x32/0xc0 [ 2539.532503] ? __mm_populate+0x228/0x3a0 [ 2539.533049] __mm_populate+0x102/0x3a0 [ 2539.533563] ? __pfx___mm_populate+0x10/0x10 [ 2539.534166] ? up_write+0x196/0x510 [ 2539.534657] __do_sys_mlockall+0x414/0x4a0 [ 2539.535215] do_syscall_64+0x3f/0x90 [ 2539.535716] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2539.536377] RIP: 0033:0x7fd09934cb19 [ 2539.536853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2539.539066] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2539.540005] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2539.540885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2539.541766] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2539.542650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2539.543535] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2539.544434] [ 2539.544873] memory: usage 307200kB, limit 307200kB, failcnt 10807 [ 2539.545648] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2539.546436] Memory cgroup stats for /syz6: [ 2539.546624] anon 291074048 [ 2539.546624] file 16646144 [ 2539.546624] kernel 6852608 [ 2539.546624] kernel_stack 950272 [ 2539.546624] pagetables 4198400 [ 2539.546624] sec_pagetables 0 [ 2539.546624] percpu 1792 [ 2539.546624] sock 0 [ 2539.546624] vmalloc 0 [ 2539.546624] shmem 0 [ 2539.546624] file_mapped 16646144 [ 2539.546624] file_dirty 0 [ 2539.546624] file_writeback 0 [ 2539.546624] swapcached 0 [ 2539.546624] inactive_anon 269533184 [ 2539.546624] active_anon 0 [ 2539.546624] inactive_file 0 [ 2539.546624] active_file 0 [ 2539.546624] unevictable 38187008 [ 2539.546624] slab_reclaimable 108576 [ 2539.546624] slab_unreclaimable 1008176 [ 2539.546624] slab 1116752 [ 2539.546624] workingset_refault_anon 0 [ 2539.546624] workingset_refault_file 5 [ 2539.546624] workingset_activate_anon 0 [ 2539.546624] workingset_activate_file 0 [ 2539.546624] workingset_restore_anon 0 [ 2539.546624] workingset_restore_file 0 [ 2539.546624] workingset_nodereclaim 0 [ 2539.546624] pgscan 2139 [ 2539.546624] pgsteal 1014 [ 2539.546624] pgscan_kswapd 0 [ 2539.546624] pgscan_direct 2139 [ 2539.546624] pgscan_khugepaged 0 [ 2539.546624] pgsteal_kswapd 0 [ 2539.546624] pgsteal_direct 1014 [ 2539.546624] pgsteal_khugepaged 0 [ 2539.546624] pgfault 1059826 [ 2539.546624] pgmajfault 0 [ 2539.546624] pgrefill 1163 [ 2539.546624] pgactivate 144649 [ 2539.546624] pgdeactivate 1145 [ 2539.546624] pglazyfree 0 [ 2539.546624] pglazyfreed 0 [ 2539.561710] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11030,uid=0 [ 2539.563631] Memory cgroup out of memory: Killed process 11030 (syz-executor.6) total-vm:93412kB, anon-rss:21196kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2539.565946] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2539.567193] CPU: 0 PID: 11023 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2539.568201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2539.569219] Call Trace: [ 2539.569551] [ 2539.569849] dump_stack_lvl+0xc1/0xf0 [ 2539.570377] dump_header+0x10a/0xd50 [ 2539.570876] oom_kill_process+0x25d/0x600 [ 2539.571416] out_of_memory+0x35c/0x1660 [ 2539.571946] ? __pfx_out_of_memory+0x10/0x10 [ 2539.572514] ? rcu_read_unlock+0x9/0x60 [ 2539.573048] ? lock_release+0x1e3/0x710 [ 2539.573574] ? lock_is_held_type+0x9f/0x120 [ 2539.574169] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2539.574790] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2539.575482] ? mem_cgroup_iter+0x291/0x710 [ 2539.576052] try_charge_memcg+0xec4/0x12e0 [ 2539.576611] ? lock_is_held_type+0x40/0x120 [ 2539.577185] ? __pfx_try_charge_memcg+0x10/0x10 [ 2539.577796] ? lock_release+0x1e3/0x710 [ 2539.578339] ? __pfx_lock_release+0x10/0x10 [ 2539.578909] ? trace_lock_acquire+0x170/0x1e0 [ 2539.579507] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2539.580135] ? lock_acquire+0x32/0xc0 [ 2539.580648] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2539.581284] charge_memcg+0x85/0x2c0 [ 2539.581786] __mem_cgroup_charge+0x28/0x90 [ 2539.582344] __handle_mm_fault+0x102b/0x31c0 [ 2539.582908] ? lock_acquire.part.0+0xec/0x320 [ 2539.583505] ? lock_is_held_type+0x9f/0x120 [ 2539.584063] ? __pfx___handle_mm_fault+0x10/0x10 [ 2539.584708] handle_mm_fault+0x1b8/0x860 [ 2539.585248] __get_user_pages+0x4d6/0x1060 [ 2539.585815] ? __pfx___get_user_pages+0x10/0x10 [ 2539.586436] ? __pfx_mt_find+0x10/0x10 [ 2539.586964] populate_vma_page_range+0x2e7/0x420 [ 2539.587579] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2539.588248] ? __pfx_find_vma_intersection+0x10/0x10 [ 2539.588908] ? lock_acquire+0x32/0xc0 [ 2539.589414] ? __mm_populate+0x228/0x3a0 [ 2539.589960] __mm_populate+0x102/0x3a0 [ 2539.590490] ? __pfx___mm_populate+0x10/0x10 [ 2539.591072] ? up_write+0x196/0x510 [ 2539.591555] __do_sys_mlockall+0x414/0x4a0 [ 2539.592109] do_syscall_64+0x3f/0x90 [ 2539.592610] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2539.593277] RIP: 0033:0x7ff90dfe0b19 [ 2539.593754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2539.595979] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2539.596921] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2539.597800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2539.598689] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2539.599566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2539.600445] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2539.601346] [ 2539.602745] memory: usage 307200kB, limit 307200kB, failcnt 4400 [ 2539.603891] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2539.604656] Memory cgroup stats for /syz4: [ 2539.604899] anon 289337344 [ 2539.604899] file 20451328 [ 2539.604899] kernel 4784128 [ 2539.604899] kernel_stack 622592 [ 2539.604899] pagetables 3002368 [ 2539.604899] sec_pagetables 0 [ 2539.604899] percpu 1152 [ 2539.604899] sock 0 [ 2539.604899] vmalloc 0 [ 2539.604899] shmem 0 [ 2539.604899] file_mapped 20447232 [ 2539.604899] file_dirty 0 [ 2539.604899] file_writeback 0 [ 2539.604899] swapcached 0 [ 2539.604899] inactive_anon 259604480 [ 2539.604899] active_anon 0 [ 2539.604899] inactive_file 4096 [ 2539.604899] active_file 0 [ 2539.604899] unevictable 50180096 [ 2539.604899] slab_reclaimable 113648 [ 2539.604899] slab_unreclaimable 664160 [ 2539.604899] slab 777808 [ 2539.604899] workingset_refault_anon 0 [ 2539.604899] workingset_refault_file 8354 [ 2539.604899] workingset_activate_anon 0 [ 2539.604899] workingset_activate_file 22 [ 2539.604899] workingset_restore_anon 0 [ 2539.604899] workingset_restore_file 0 [ 2539.604899] workingset_nodereclaim 0 [ 2539.604899] pgscan 11355 [ 2539.604899] pgsteal 8370 [ 2539.604899] pgscan_kswapd 1 [ 2539.604899] pgscan_direct 11354 [ 2539.604899] pgscan_khugepaged 0 [ 2539.604899] pgsteal_kswapd 0 [ 2539.604899] pgsteal_direct 8370 [ 2539.604899] pgsteal_khugepaged 0 [ 2539.604899] pgfault 543463 [ 2539.604899] pgmajfault 27 [ 2539.604899] pgrefill 1453 [ 2539.604899] pgactivate 54561 [ 2539.604899] pgdeactivate 1453 [ 2539.604899] pglazyfree 0 [ 2539.604899] pglazyfreed 0 [ 2539.620362] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11022,uid=0 [ 2539.622288] Memory cgroup out of memory: Killed process 11022 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:32:48 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:32:48 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, 0x0, 0x0, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:32:48 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:32:48 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:32:48 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:32:48 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:32:48 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:32:48 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:32:48 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:32:48 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:32:48 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:32:48 executing program 3: openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:32:48 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2552.958027] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2552.958650] CPU: 0 PID: 11078 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2552.959147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2552.959671] Call Trace: [ 2552.959868] [ 2552.960028] dump_stack_lvl+0xc1/0xf0 [ 2552.960309] dump_header+0x10a/0xd50 [ 2552.960576] oom_kill_process+0x25d/0x600 [ 2552.960867] out_of_memory+0x35c/0x1660 [ 2552.961151] ? find_held_lock+0x2c/0x110 [ 2552.961434] ? __pfx_out_of_memory+0x10/0x10 [ 2552.961734] ? rcu_read_unlock+0x9/0x60 [ 2552.962019] ? lock_release+0x1e3/0x710 [ 2552.962297] ? lock_is_held_type+0x9f/0x120 [ 2552.962607] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2552.962936] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2552.963298] ? mem_cgroup_iter+0x291/0x710 [ 2552.963598] try_charge_memcg+0xec4/0x12e0 [ 2552.963899] ? lock_is_held_type+0x40/0x120 [ 2552.964227] ? __pfx_try_charge_memcg+0x10/0x10 [ 2552.964557] ? lock_release+0x1e3/0x710 [ 2552.964838] ? __pfx_lock_release+0x10/0x10 [ 2552.965142] ? trace_lock_acquire+0x170/0x1e0 [ 2552.965456] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2552.965782] ? lock_acquire+0x32/0xc0 [ 2552.966060] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2552.966403] charge_memcg+0x85/0x2c0 [ 2552.966670] __mem_cgroup_charge+0x28/0x90 [ 2552.966959] __handle_mm_fault+0x102b/0x31c0 [ 2552.967260] ? lock_acquire.part.0+0xec/0x320 [ 2552.967578] ? lock_is_held_type+0x9f/0x120 [ 2552.967877] ? __pfx___handle_mm_fault+0x10/0x10 [ 2552.968239] handle_mm_fault+0x1b8/0x860 [ 2552.968521] __get_user_pages+0x4d6/0x1060 [ 2552.968823] ? __pfx___get_user_pages+0x10/0x10 [ 2552.969154] ? __pfx_mt_find+0x10/0x10 [ 2552.969435] populate_vma_page_range+0x2e7/0x420 [ 2552.969761] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2552.970120] ? __pfx_find_vma_intersection+0x10/0x10 [ 2552.970502] ? lock_acquire+0x32/0xc0 [ 2552.970773] ? __mm_populate+0x228/0x3a0 [ 2552.971083] __mm_populate+0x102/0x3a0 [ 2552.971364] ? __pfx___mm_populate+0x10/0x10 [ 2552.971672] ? up_write+0x196/0x510 [ 2552.971941] __do_sys_mlockall+0x414/0x4a0 [ 2552.972238] do_syscall_64+0x3f/0x90 [ 2552.972516] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2552.972872] RIP: 0033:0x7fd09934cb19 [ 2552.973124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2552.974286] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2552.974795] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2552.975263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2552.975724] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2552.976198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2552.976670] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2552.977199] [ 2552.977426] memory: usage 307200kB, limit 307200kB, failcnt 10902 [ 2552.977873] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2552.978299] Memory cgroup stats for /syz6: [ 2552.978437] anon 291074048 [ 2552.978437] file 16646144 [ 2552.978437] kernel 6852608 [ 2552.978437] kernel_stack 950272 [ 2552.978437] pagetables 4198400 [ 2552.978437] sec_pagetables 0 [ 2552.978437] percpu 1792 [ 2552.978437] sock 0 [ 2552.978437] vmalloc 0 [ 2552.978437] shmem 0 [ 2552.978437] file_mapped 16646144 [ 2552.978437] file_dirty 0 [ 2552.978437] file_writeback 0 [ 2552.978437] swapcached 0 [ 2552.978437] inactive_anon 269533184 [ 2552.978437] active_anon 0 [ 2552.978437] inactive_file 0 [ 2552.978437] active_file 0 [ 2552.978437] unevictable 38154240 [ 2552.978437] slab_reclaimable 108576 [ 2552.978437] slab_unreclaimable 1008176 [ 2552.978437] slab 1116752 [ 2552.978437] workingset_refault_anon 0 [ 2552.978437] workingset_refault_file 5 [ 2552.978437] workingset_activate_anon 0 [ 2552.978437] workingset_activate_file 0 [ 2552.978437] workingset_restore_anon 0 [ 2552.978437] workingset_restore_file 0 [ 2552.978437] workingset_nodereclaim 0 [ 2552.978437] pgscan 2139 [ 2552.978437] pgsteal 1014 [ 2552.978437] pgscan_kswapd 0 [ 2552.978437] pgscan_direct 2139 [ 2552.978437] pgscan_khugepaged 0 [ 2552.978437] pgsteal_kswapd 0 [ 2552.978437] pgsteal_direct 1014 [ 2552.978437] pgsteal_khugepaged 0 [ 2552.978437] pgfault 1065371 [ 2552.978437] pgmajfault 0 [ 2552.978437] pgrefill 1163 [ 2552.978437] pgactivate 145393 [ 2552.978437] pgdeactivate 1145 [ 2552.978437] pglazyfree 0 [ 2552.978437] pglazyfreed 0 [ 2552.987164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11074,uid=0 [ 2552.988287] Memory cgroup out of memory: Killed process 11074 (syz-executor.6) total-vm:93412kB, anon-rss:21160kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2553.107398] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2553.108155] CPU: 0 PID: 11067 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2553.108734] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2553.109307] Call Trace: [ 2553.109498] [ 2553.109665] dump_stack_lvl+0xc1/0xf0 [ 2553.109964] dump_header+0x10a/0xd50 [ 2553.110253] oom_kill_process+0x25d/0x600 [ 2553.110579] out_of_memory+0x35c/0x1660 [ 2553.110883] ? find_held_lock+0x2c/0x110 [ 2553.111188] ? __pfx_out_of_memory+0x10/0x10 [ 2553.111514] ? rcu_read_unlock+0x9/0x60 [ 2553.111828] ? lock_release+0x1e3/0x710 [ 2553.112129] ? lock_is_held_type+0x9f/0x120 [ 2553.112462] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2553.112820] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2553.113213] ? mem_cgroup_iter+0x291/0x710 [ 2553.113542] try_charge_memcg+0xec4/0x12e0 [ 2553.113858] ? lock_is_held_type+0x40/0x120 [ 2553.114183] ? __pfx_try_charge_memcg+0x10/0x10 [ 2553.114547] ? lock_release+0x1e3/0x710 [ 2553.114847] ? __pfx_lock_release+0x10/0x10 [ 2553.115165] ? trace_lock_acquire+0x170/0x1e0 [ 2553.115506] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2553.115854] ? lock_acquire+0x32/0xc0 [ 2553.116147] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2553.116510] charge_memcg+0x85/0x2c0 [ 2553.116797] __mem_cgroup_charge+0x28/0x90 [ 2553.117104] __handle_mm_fault+0x102b/0x31c0 [ 2553.117429] ? lock_acquire.part.0+0xec/0x320 [ 2553.117756] ? lock_is_held_type+0x9f/0x120 [ 2553.118082] ? __pfx___handle_mm_fault+0x10/0x10 [ 2553.118455] handle_mm_fault+0x1b8/0x860 [ 2553.118759] __get_user_pages+0x4d6/0x1060 [ 2553.119076] ? __pfx___get_user_pages+0x10/0x10 [ 2553.119425] ? __pfx_mt_find+0x10/0x10 [ 2553.119722] populate_vma_page_range+0x2e7/0x420 [ 2553.120079] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2553.120460] ? __pfx_find_vma_intersection+0x10/0x10 [ 2553.120839] ? lock_acquire+0x32/0xc0 [ 2553.121132] ? __mm_populate+0x228/0x3a0 [ 2553.121439] __mm_populate+0x102/0x3a0 [ 2553.121740] ? __pfx___mm_populate+0x10/0x10 [ 2553.122076] ? up_write+0x196/0x510 [ 2553.122357] __do_sys_mlockall+0x414/0x4a0 [ 2553.122670] do_syscall_64+0x3f/0x90 [ 2553.122948] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2553.123322] RIP: 0033:0x7ff90dfe0b19 [ 2553.123591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2553.124856] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2553.125392] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2553.125896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2553.126417] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2553.126919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2553.127425] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2553.127940] [ 2553.128168] memory: usage 307200kB, limit 307200kB, failcnt 4466 [ 2553.128602] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2553.129050] Memory cgroup stats for /syz4: [ 2553.129179] anon 289349632 [ 2553.129179] file 20451328 [ 2553.129179] kernel 4771840 [ 2553.129179] kernel_stack 622592 [ 2553.129179] pagetables 3002368 [ 2553.129179] sec_pagetables 0 [ 2553.129179] percpu 1152 [ 2553.129179] sock 0 [ 2553.129179] vmalloc 0 [ 2553.129179] shmem 0 [ 2553.129179] file_mapped 20447232 [ 2553.129179] file_dirty 0 [ 2553.129179] file_writeback 0 [ 2553.129179] swapcached 0 [ 2553.129179] inactive_anon 259604480 [ 2553.129179] active_anon 0 [ 2553.129179] inactive_file 0 [ 2553.129179] active_file 4096 [ 2553.129179] unevictable 50184192 [ 2553.129179] slab_reclaimable 101520 [ 2553.129179] slab_unreclaimable 664160 [ 2553.129179] slab 765680 [ 2553.129179] workingset_refault_anon 0 [ 2553.129179] workingset_refault_file 8354 [ 2553.129179] workingset_activate_anon 0 [ 2553.129179] workingset_activate_file 22 [ 2553.129179] workingset_restore_anon 0 [ 2553.129179] workingset_restore_file 0 [ 2553.129179] workingset_nodereclaim 0 [ 2553.129179] pgscan 11367 [ 2553.129179] pgsteal 8370 [ 2553.129179] pgscan_kswapd 1 [ 2553.129179] pgscan_direct 11366 [ 2553.129179] pgscan_khugepaged 0 [ 2553.129179] pgsteal_kswapd 0 [ 2553.129179] pgsteal_direct 8370 [ 2553.129179] pgsteal_khugepaged 0 [ 2553.129179] pgfault 551087 [ 2553.129179] pgmajfault 27 [ 2553.129179] pgrefill 1464 [ 2553.129179] pgactivate 55377 [ 2553.129179] pgdeactivate 1464 [ 2553.129179] pglazyfree 0 [ 2553.129179] pglazyfreed 0 [ 2553.138024] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11063,uid=0 [ 2553.139064] Memory cgroup out of memory: Killed process 11063 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:33:02 executing program 4: openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:33:02 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:33:02 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, 0x0, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:33:02 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x0, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:33:02 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:33:02 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:33:02 executing program 3: openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:33:02 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:33:02 executing program 3: openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:33:02 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:33:02 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:33:02 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:33:02 executing program 4: openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:33:02 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:33:02 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x0, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:33:02 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:33:02 executing program 4: openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:33:02 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) [ 2566.403202] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2566.403892] CPU: 1 PID: 11101 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2566.404438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2566.404978] Call Trace: [ 2566.405156] [ 2566.405322] dump_stack_lvl+0xc1/0xf0 [ 2566.405604] dump_header+0x10a/0xd50 [ 2566.405873] oom_kill_process+0x25d/0x600 [ 2566.406164] out_of_memory+0x35c/0x1660 [ 2566.406443] ? find_held_lock+0x2c/0x110 [ 2566.406749] ? __pfx_out_of_memory+0x10/0x10 [ 2566.407055] ? rcu_read_unlock+0x9/0x60 [ 2566.407345] ? lock_release+0x1e3/0x710 [ 2566.407626] ? lock_is_held_type+0x9f/0x120 [ 2566.407933] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2566.408269] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2566.408641] ? mem_cgroup_iter+0x291/0x710 [ 2566.408946] try_charge_memcg+0xec4/0x12e0 [ 2566.409248] ? lock_is_held_type+0x40/0x120 [ 2566.409555] ? __pfx_try_charge_memcg+0x10/0x10 [ 2566.409886] ? lock_release+0x1e3/0x710 [ 2566.410170] ? __pfx_lock_release+0x10/0x10 [ 2566.410484] ? trace_lock_acquire+0x170/0x1e0 [ 2566.410811] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2566.411139] ? lock_acquire+0x32/0xc0 [ 2566.411410] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2566.411758] charge_memcg+0x85/0x2c0 [ 2566.412034] __mem_cgroup_charge+0x28/0x90 [ 2566.412324] __handle_mm_fault+0x102b/0x31c0 [ 2566.412627] ? lock_acquire.part.0+0xec/0x320 [ 2566.412951] ? lock_is_held_type+0x9f/0x120 [ 2566.413251] ? __pfx___handle_mm_fault+0x10/0x10 [ 2566.413597] handle_mm_fault+0x1b8/0x860 [ 2566.413881] __get_user_pages+0x4d6/0x1060 [ 2566.414191] ? __pfx___get_user_pages+0x10/0x10 [ 2566.414520] ? __pfx_mt_find+0x10/0x10 [ 2566.414805] populate_vma_page_range+0x2e7/0x420 [ 2566.415135] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2566.415494] ? __pfx_find_vma_intersection+0x10/0x10 [ 2566.415850] ? lock_acquire+0x32/0xc0 [ 2566.416125] ? __mm_populate+0x228/0x3a0 [ 2566.416415] __mm_populate+0x102/0x3a0 [ 2566.416693] ? __pfx___mm_populate+0x10/0x10 [ 2566.417011] ? up_write+0x196/0x510 [ 2566.417271] __do_sys_mlockall+0x414/0x4a0 [ 2566.417572] do_syscall_64+0x3f/0x90 [ 2566.417841] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2566.418200] RIP: 0033:0x7fd09934cb19 [ 2566.418463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2566.419664] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2566.420169] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2566.420634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2566.421102] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2566.421594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2566.422082] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2566.422602] [ 2566.423599] memory: usage 307200kB, limit 307200kB, failcnt 10975 [ 2566.424227] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2566.424643] Memory cgroup stats for /syz6: [ 2566.424765] anon 291074048 [ 2566.424765] file 16646144 [ 2566.424765] kernel 6852608 [ 2566.424765] kernel_stack 950272 [ 2566.424765] pagetables 4198400 [ 2566.424765] sec_pagetables 0 [ 2566.424765] percpu 1792 [ 2566.424765] sock 0 [ 2566.424765] vmalloc 0 [ 2566.424765] shmem 0 [ 2566.424765] file_mapped 16646144 [ 2566.424765] file_dirty 0 [ 2566.424765] file_writeback 0 [ 2566.424765] swapcached 0 [ 2566.424765] inactive_anon 269533184 [ 2566.424765] active_anon 0 [ 2566.424765] inactive_file 0 [ 2566.424765] active_file 0 [ 2566.424765] unevictable 38187008 [ 2566.424765] slab_reclaimable 108576 [ 2566.424765] slab_unreclaimable 1008176 [ 2566.424765] slab 1116752 [ 2566.424765] workingset_refault_anon 0 [ 2566.424765] workingset_refault_file 5 [ 2566.424765] workingset_activate_anon 0 [ 2566.424765] workingset_activate_file 0 [ 2566.424765] workingset_restore_anon 0 [ 2566.424765] workingset_restore_file 0 [ 2566.424765] workingset_nodereclaim 0 [ 2566.424765] pgscan 2139 [ 2566.424765] pgsteal 1014 [ 2566.424765] pgscan_kswapd 0 [ 2566.424765] pgscan_direct 2139 [ 2566.424765] pgscan_khugepaged 0 [ 2566.424765] pgsteal_kswapd 0 [ 2566.424765] pgsteal_direct 1014 [ 2566.424765] pgsteal_khugepaged 0 [ 2566.424765] pgfault 1070916 [ 2566.424765] pgmajfault 0 [ 2566.424765] pgrefill 1170 [ 2566.424765] pgactivate 145964 [ 2566.424765] pgdeactivate 1145 [ 2566.424765] pglazyfree 0 [ 2566.424765] pglazyfreed 0 [ 2566.433310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11094,uid=0 [ 2566.434383] Memory cgroup out of memory: Killed process 11094 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 16:33:14 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:33:14 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:33:14 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, 0x0, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:33:14 executing program 4: clock_gettime(0x5, &(0x7f0000000180)) 16:33:14 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:33:14 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:33:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x0, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:33:14 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0x0, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:33:14 executing program 4: clock_gettime(0x0, &(0x7f0000000180)) 16:33:14 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000180)) 16:33:14 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0x0, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:33:14 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:33:14 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:33:14 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:33:14 executing program 4: clock_gettime(0x0, &(0x7f0000000180)) [ 2578.156189] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2578.156944] CPU: 1 PID: 11147 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2578.157488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2578.158031] Call Trace: [ 2578.158215] [ 2578.158376] dump_stack_lvl+0xc1/0xf0 [ 2578.158671] dump_header+0x10a/0xd50 [ 2578.158941] oom_kill_process+0x25d/0x600 [ 2578.159233] out_of_memory+0x35c/0x1660 [ 2578.159519] ? find_held_lock+0x2c/0x110 [ 2578.159803] ? __pfx_out_of_memory+0x10/0x10 [ 2578.160102] ? rcu_read_unlock+0x9/0x60 [ 2578.160387] ? lock_release+0x1e3/0x710 [ 2578.160676] ? lock_is_held_type+0x9f/0x120 [ 2578.160983] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2578.161319] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2578.161684] ? mem_cgroup_iter+0x291/0x710 [ 2578.161990] try_charge_memcg+0xec4/0x12e0 [ 2578.162287] ? lock_is_held_type+0x40/0x120 [ 2578.162600] ? __pfx_try_charge_memcg+0x10/0x10 [ 2578.162944] ? lock_release+0x1e3/0x710 [ 2578.163226] ? __pfx_lock_release+0x10/0x10 [ 2578.163530] ? trace_lock_acquire+0x170/0x1e0 [ 2578.163848] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2578.164182] ? lock_acquire+0x32/0xc0 [ 2578.164456] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2578.164792] charge_memcg+0x85/0x2c0 [ 2578.165066] __mem_cgroup_charge+0x28/0x90 [ 2578.165359] __handle_mm_fault+0x102b/0x31c0 [ 2578.165662] ? lock_acquire.part.0+0xec/0x320 [ 2578.165977] ? lock_is_held_type+0x9f/0x120 [ 2578.166281] ? __pfx___handle_mm_fault+0x10/0x10 [ 2578.166628] handle_mm_fault+0x1b8/0x860 [ 2578.166929] __get_user_pages+0x4d6/0x1060 [ 2578.167234] ? __pfx___get_user_pages+0x10/0x10 [ 2578.167562] ? __pfx_mt_find+0x10/0x10 [ 2578.167851] populate_vma_page_range+0x2e7/0x420 [ 2578.168184] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2578.168542] ? __pfx_find_vma_intersection+0x10/0x10 [ 2578.168900] ? lock_acquire+0x32/0xc0 [ 2578.169169] ? __mm_populate+0x228/0x3a0 [ 2578.169463] __mm_populate+0x102/0x3a0 [ 2578.169740] ? __pfx___mm_populate+0x10/0x10 [ 2578.170047] ? up_write+0x196/0x510 [ 2578.170314] __do_sys_mlockall+0x414/0x4a0 [ 2578.170614] do_syscall_64+0x3f/0x90 [ 2578.170898] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2578.171257] RIP: 0033:0x7fd09934cb19 [ 2578.171511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2578.172700] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2578.173204] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2578.173673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2578.174138] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2578.174600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2578.175076] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2578.175562] [ 2578.175765] memory: usage 307200kB, limit 307200kB, failcnt 11034 [ 2578.176191] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2578.176606] Memory cgroup stats for /syz6: [ 2578.176734] anon 291074048 [ 2578.176734] file 16646144 [ 2578.176734] kernel 6852608 [ 2578.176734] kernel_stack 950272 [ 2578.176734] pagetables 4198400 [ 2578.176734] sec_pagetables 0 [ 2578.176734] percpu 1792 [ 2578.176734] sock 0 [ 2578.176734] vmalloc 0 [ 2578.176734] shmem 0 [ 2578.176734] file_mapped 16646144 [ 2578.176734] file_dirty 0 [ 2578.176734] file_writeback 0 [ 2578.176734] swapcached 0 [ 2578.176734] inactive_anon 269533184 [ 2578.176734] active_anon 0 [ 2578.176734] inactive_file 0 [ 2578.176734] active_file 0 [ 2578.176734] unevictable 38187008 [ 2578.176734] slab_reclaimable 108576 [ 2578.176734] slab_unreclaimable 1008176 [ 2578.176734] slab 1116752 [ 2578.176734] workingset_refault_anon 0 [ 2578.176734] workingset_refault_file 5 [ 2578.176734] workingset_activate_anon 0 [ 2578.176734] workingset_activate_file 0 [ 2578.176734] workingset_restore_anon 0 [ 2578.176734] workingset_restore_file 0 [ 2578.176734] workingset_nodereclaim 0 [ 2578.176734] pgscan 2139 [ 2578.176734] pgsteal 1014 [ 2578.176734] pgscan_kswapd 0 [ 2578.176734] pgscan_direct 2139 [ 2578.176734] pgscan_khugepaged 0 [ 2578.176734] pgsteal_kswapd 0 [ 2578.176734] pgsteal_direct 1014 [ 2578.176734] pgsteal_khugepaged 0 [ 2578.176734] pgfault 1076461 [ 2578.176734] pgmajfault 0 [ 2578.176734] pgrefill 1170 [ 2578.176734] pgactivate 146636 [ 2578.176734] pgdeactivate 1145 [ 2578.176734] pglazyfree 0 [ 2578.176734] pglazyfreed 0 [ 2578.185141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11143,uid=0 [ 2578.186190] Memory cgroup out of memory: Killed process 11143 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 16:33:28 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:33:28 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:33:28 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, 0x0, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:33:28 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) clock_gettime(0x0, &(0x7f0000000180)) 16:33:28 executing program 4: clock_gettime(0x0, &(0x7f0000000180)) 16:33:28 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0x0, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:33:28 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:33:28 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:33:28 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:33:28 executing program 3: openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) clock_gettime(0x0, 0x0) 16:33:28 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:33:28 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:33:28 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:33:28 executing program 4: clock_gettime(0x5, 0x0) 16:33:28 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:33:28 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) [ 2592.136485] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2592.137863] CPU: 1 PID: 11171 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2592.138952] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.140039] Call Trace: [ 2592.140395] [ 2592.140716] dump_stack_lvl+0xc1/0xf0 [ 2592.141274] dump_header+0x10a/0xd50 [ 2592.141804] oom_kill_process+0x25d/0x600 [ 2592.142382] out_of_memory+0x35c/0x1660 [ 2592.142969] ? find_held_lock+0x2c/0x110 [ 2592.143540] ? __pfx_out_of_memory+0x10/0x10 [ 2592.144152] ? rcu_read_unlock+0x9/0x60 [ 2592.144724] ? lock_release+0x1e3/0x710 [ 2592.145299] ? lock_is_held_type+0x9f/0x120 [ 2592.145917] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2592.146594] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2592.147353] ? mem_cgroup_iter+0x291/0x710 [ 2592.147972] try_charge_memcg+0xec4/0x12e0 [ 2592.148577] ? lock_is_held_type+0x40/0x120 [ 2592.149192] ? __pfx_try_charge_memcg+0x10/0x10 [ 2592.149853] ? lock_release+0x1e3/0x710 [ 2592.150426] ? __pfx_lock_release+0x10/0x10 [ 2592.151051] ? trace_lock_acquire+0x170/0x1e0 [ 2592.151693] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2592.152354] ? lock_acquire+0x32/0xc0 [ 2592.152872] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2592.153531] charge_memcg+0x85/0x2c0 [ 2592.154054] __mem_cgroup_charge+0x28/0x90 [ 2592.154616] __handle_mm_fault+0x102b/0x31c0 [ 2592.155219] ? lock_acquire.part.0+0xec/0x320 [ 2592.155825] ? lock_is_held_type+0x9f/0x120 [ 2592.156408] ? __pfx___handle_mm_fault+0x10/0x10 [ 2592.157094] handle_mm_fault+0x1b8/0x860 [ 2592.157644] __get_user_pages+0x4d6/0x1060 [ 2592.158222] ? __pfx___get_user_pages+0x10/0x10 [ 2592.158853] ? __pfx_mt_find+0x10/0x10 [ 2592.159395] populate_vma_page_range+0x2e7/0x420 [ 2592.160053] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2592.160780] ? __pfx_find_vma_intersection+0x10/0x10 [ 2592.161474] ? lock_acquire+0x32/0xc0 [ 2592.161997] ? __mm_populate+0x228/0x3a0 [ 2592.162550] __mm_populate+0x102/0x3a0 [ 2592.163088] ? __pfx___mm_populate+0x10/0x10 [ 2592.163681] ? up_write+0x196/0x510 [ 2592.164176] __do_sys_mlockall+0x414/0x4a0 [ 2592.164746] do_syscall_64+0x3f/0x90 [ 2592.165265] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2592.165939] RIP: 0033:0x7fd09934cb19 [ 2592.166420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2592.168713] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2592.169664] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2592.170561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2592.171457] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2592.172363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2592.173259] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2592.174198] [ 2592.174658] memory: usage 307200kB, limit 307200kB, failcnt 11105 [ 2592.175560] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2592.176359] Memory cgroup stats for /syz6: [ 2592.176573] anon 291074048 [ 2592.176573] file 16646144 [ 2592.176573] kernel 6852608 [ 2592.176573] kernel_stack 950272 [ 2592.176573] pagetables 4198400 [ 2592.176573] sec_pagetables 0 [ 2592.176573] percpu 1792 [ 2592.176573] sock 0 [ 2592.176573] vmalloc 0 [ 2592.176573] shmem 0 [ 2592.176573] file_mapped 16646144 [ 2592.176573] file_dirty 0 [ 2592.176573] file_writeback 0 [ 2592.176573] swapcached 0 [ 2592.176573] inactive_anon 269533184 [ 2592.176573] active_anon 0 [ 2592.176573] inactive_file 0 [ 2592.176573] active_file 0 [ 2592.176573] unevictable 38154240 [ 2592.176573] slab_reclaimable 108576 [ 2592.176573] slab_unreclaimable 1008176 [ 2592.176573] slab 1116752 [ 2592.176573] workingset_refault_anon 0 [ 2592.176573] workingset_refault_file 5 [ 2592.176573] workingset_activate_anon 0 [ 2592.176573] workingset_activate_file 0 [ 2592.176573] workingset_restore_anon 0 [ 2592.176573] workingset_restore_file 0 [ 2592.176573] workingset_nodereclaim 0 [ 2592.176573] pgscan 2139 [ 2592.176573] pgsteal 1014 [ 2592.176573] pgscan_kswapd 0 [ 2592.176573] pgscan_direct 2139 [ 2592.176573] pgscan_khugepaged 0 [ 2592.176573] pgsteal_kswapd 0 [ 2592.176573] pgsteal_direct 1014 [ 2592.176573] pgsteal_khugepaged 0 [ 2592.176573] pgfault 1082006 [ 2592.176573] pgmajfault 0 [ 2592.176573] pgrefill 1170 [ 2592.176573] pgactivate 147543 [ 2592.176573] pgdeactivate 1145 [ 2592.176573] pglazyfree 0 [ 2592.176573] pglazyfreed 0 [ 2592.191611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11170,uid=0 [ 2592.193552] Memory cgroup out of memory: Killed process 11170 (syz-executor.6) total-vm:93412kB, anon-rss:21160kB, file-rss:51840kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 16:33:46 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:33:46 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, 0x0, 0x0, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:33:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:33:46 executing program 3: clock_gettime(0x0, &(0x7f0000000180)) 16:33:46 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:33:46 executing program 4: clock_gettime(0x5, 0x0) 16:33:46 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:33:46 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:33:46 executing program 3: clock_gettime(0x0, &(0x7f0000000180)) 16:33:46 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:33:46 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:33:46 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:33:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x0, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:33:46 executing program 3: clock_gettime(0x0, &(0x7f0000000180)) 16:33:46 executing program 4: clock_gettime(0x5, 0x0) 16:33:46 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) [ 2610.681507] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2610.682198] CPU: 0 PID: 11212 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2610.682744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2610.683285] Call Trace: [ 2610.683465] [ 2610.683624] dump_stack_lvl+0xc1/0xf0 [ 2610.683913] dump_header+0x10a/0xd50 [ 2610.684177] oom_kill_process+0x25d/0x600 [ 2610.684461] out_of_memory+0x35c/0x1660 [ 2610.684740] ? find_held_lock+0x2c/0x110 [ 2610.685023] ? __pfx_out_of_memory+0x10/0x10 [ 2610.685323] ? rcu_read_unlock+0x9/0x60 [ 2610.685609] ? lock_release+0x1e3/0x710 [ 2610.685891] ? lock_is_held_type+0x9f/0x120 [ 2610.686196] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2610.686524] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2610.686899] ? mem_cgroup_iter+0x291/0x710 [ 2610.687215] try_charge_memcg+0xec4/0x12e0 [ 2610.687516] ? lock_is_held_type+0x40/0x120 [ 2610.687817] ? __pfx_try_charge_memcg+0x10/0x10 [ 2610.688143] ? lock_release+0x1e3/0x710 [ 2610.688420] ? __pfx_lock_release+0x10/0x10 [ 2610.688721] ? trace_lock_acquire+0x170/0x1e0 [ 2610.689037] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2610.689367] ? lock_acquire+0x32/0xc0 [ 2610.689635] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2610.689970] charge_memcg+0x85/0x2c0 [ 2610.690242] __mem_cgroup_charge+0x28/0x90 [ 2610.690532] __handle_mm_fault+0x102b/0x31c0 [ 2610.690844] ? lock_acquire.part.0+0xec/0x320 [ 2610.691181] ? lock_is_held_type+0x9f/0x120 [ 2610.691498] ? __pfx___handle_mm_fault+0x10/0x10 [ 2610.691871] handle_mm_fault+0x1b8/0x860 [ 2610.692161] __get_user_pages+0x4d6/0x1060 [ 2610.692482] ? __pfx___get_user_pages+0x10/0x10 [ 2610.692821] ? __pfx_mt_find+0x10/0x10 [ 2610.693120] populate_vma_page_range+0x2e7/0x420 [ 2610.693471] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2610.693852] ? __pfx_find_vma_intersection+0x10/0x10 [ 2610.694218] ? lock_acquire+0x32/0xc0 [ 2610.694508] ? __mm_populate+0x228/0x3a0 [ 2610.694806] __mm_populate+0x102/0x3a0 [ 2610.695113] ? __pfx___mm_populate+0x10/0x10 [ 2610.695437] ? up_write+0x196/0x510 [ 2610.695700] __do_sys_mlockall+0x414/0x4a0 [ 2610.696011] do_syscall_64+0x3f/0x90 [ 2610.696294] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2610.696672] RIP: 0033:0x7fd09934cb19 [ 2610.696939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2610.698183] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2610.698711] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2610.699217] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2610.699706] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2610.700209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2610.700701] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2610.701220] [ 2610.701460] memory: usage 307200kB, limit 307200kB, failcnt 11180 [ 2610.701913] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2610.702322] Memory cgroup stats for /syz6: [ 2610.702452] anon 291074048 [ 2610.702452] file 16646144 [ 2610.702452] kernel 6852608 [ 2610.702452] kernel_stack 950272 [ 2610.702452] pagetables 4198400 [ 2610.702452] sec_pagetables 0 [ 2610.702452] percpu 1792 [ 2610.702452] sock 0 [ 2610.702452] vmalloc 0 [ 2610.702452] shmem 0 [ 2610.702452] file_mapped 16646144 [ 2610.702452] file_dirty 0 [ 2610.702452] file_writeback 0 [ 2610.702452] swapcached 0 [ 2610.702452] inactive_anon 269533184 [ 2610.702452] active_anon 0 [ 2610.702452] inactive_file 0 [ 2610.702452] active_file 0 [ 2610.702452] unevictable 38174720 [ 2610.702452] slab_reclaimable 108576 [ 2610.702452] slab_unreclaimable 1008176 [ 2610.702452] slab 1116752 [ 2610.702452] workingset_refault_anon 0 [ 2610.702452] workingset_refault_file 5 [ 2610.702452] workingset_activate_anon 0 [ 2610.702452] workingset_activate_file 0 [ 2610.702452] workingset_restore_anon 0 [ 2610.702452] workingset_restore_file 0 [ 2610.702452] workingset_nodereclaim 0 [ 2610.702452] pgscan 2139 [ 2610.702452] pgsteal 1014 [ 2610.702452] pgscan_kswapd 0 [ 2610.702452] pgscan_direct 2139 [ 2610.702452] pgscan_khugepaged 0 [ 2610.702452] pgsteal_kswapd 0 [ 2610.702452] pgsteal_direct 1014 [ 2610.702452] pgsteal_khugepaged 0 [ 2610.702452] pgfault 1087551 [ 2610.702452] pgmajfault 0 [ 2610.702452] pgrefill 1170 [ 2610.702452] pgactivate 148183 [ 2610.702452] pgdeactivate 1145 [ 2610.702452] pglazyfree 0 [ 2610.702452] pglazyfreed 0 [ 2610.711038] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11208,uid=0 [ 2610.712089] Memory cgroup out of memory: Killed process 11208 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51840kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 16:33:59 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) 16:33:59 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x0, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:33:59 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:33:59 executing program 3: clock_gettime(0x0, 0x0) 16:33:59 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:33:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:33:59 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:33:59 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, 0x0, 0x0, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:33:59 executing program 3: clock_gettime(0x0, 0x0) 16:33:59 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:33:59 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x0, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:33:59 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:33:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:33:59 executing program 3: clock_gettime(0x0, 0x0) 16:33:59 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x0, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:33:59 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) [ 2623.339386] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2623.340619] CPU: 0 PID: 11261 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2623.341612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2623.342597] Call Trace: [ 2623.342926] [ 2623.343218] dump_stack_lvl+0xc1/0xf0 [ 2623.343757] dump_header+0x10a/0xd50 [ 2623.344244] oom_kill_process+0x25d/0x600 [ 2623.344786] out_of_memory+0x35c/0x1660 [ 2623.345299] ? find_held_lock+0x2c/0x110 [ 2623.345832] ? __pfx_out_of_memory+0x10/0x10 [ 2623.346395] ? rcu_read_unlock+0x9/0x60 [ 2623.346915] ? lock_release+0x1e3/0x710 [ 2623.347438] ? lock_is_held_type+0x9f/0x120 [ 2623.348003] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2623.348612] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2623.349295] ? mem_cgroup_iter+0x291/0x710 [ 2623.349853] try_charge_memcg+0xec4/0x12e0 [ 2623.350436] ? lock_is_held_type+0x40/0x120 [ 2623.350993] ? __pfx_try_charge_memcg+0x10/0x10 [ 2623.351637] ? lock_release+0x1e3/0x710 [ 2623.352185] ? __pfx_lock_release+0x10/0x10 [ 2623.352772] ? trace_lock_acquire+0x170/0x1e0 [ 2623.353387] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2623.354039] ? lock_acquire+0x32/0xc0 [ 2623.354567] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2623.355233] charge_memcg+0x85/0x2c0 [ 2623.355762] __mem_cgroup_charge+0x28/0x90 [ 2623.356325] __handle_mm_fault+0x102b/0x31c0 [ 2623.356916] ? lock_acquire.part.0+0xec/0x320 [ 2623.357545] ? lock_is_held_type+0x9f/0x120 [ 2623.358139] ? __pfx___handle_mm_fault+0x10/0x10 [ 2623.358812] handle_mm_fault+0x1b8/0x860 [ 2623.359376] __get_user_pages+0x4d6/0x1060 [ 2623.359975] ? __pfx___get_user_pages+0x10/0x10 [ 2623.360603] ? __pfx_mt_find+0x10/0x10 [ 2623.361147] populate_vma_page_range+0x2e7/0x420 [ 2623.361781] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2623.362472] ? __pfx_find_vma_intersection+0x10/0x10 [ 2623.363158] ? lock_acquire+0x32/0xc0 [ 2623.363700] ? __mm_populate+0x228/0x3a0 [ 2623.364257] __mm_populate+0x102/0x3a0 [ 2623.364790] ? __pfx___mm_populate+0x10/0x10 [ 2623.365367] ? up_write+0x196/0x510 [ 2623.365845] __do_sys_mlockall+0x414/0x4a0 [ 2623.366382] do_syscall_64+0x3f/0x90 [ 2623.366887] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2623.367561] RIP: 0033:0x7fd09934cb19 [ 2623.368025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2623.370160] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2623.371087] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2623.371950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2623.372806] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2623.373725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2623.374637] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2623.375594] [ 2623.377056] memory: usage 307200kB, limit 307200kB, failcnt 11264 [ 2623.378122] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2623.378964] Memory cgroup stats for /syz6: [ 2623.379188] anon 291074048 [ 2623.379188] file 16646144 [ 2623.379188] kernel 6852608 [ 2623.379188] kernel_stack 950272 [ 2623.379188] pagetables 4198400 [ 2623.379188] sec_pagetables 0 [ 2623.379188] percpu 1792 [ 2623.379188] sock 0 [ 2623.379188] vmalloc 0 [ 2623.379188] shmem 0 [ 2623.379188] file_mapped 16646144 [ 2623.379188] file_dirty 0 [ 2623.379188] file_writeback 0 [ 2623.379188] swapcached 0 [ 2623.379188] inactive_anon 269533184 [ 2623.379188] active_anon 0 [ 2623.379188] inactive_file 0 [ 2623.379188] active_file 0 [ 2623.379188] unevictable 38154240 [ 2623.379188] slab_reclaimable 108576 [ 2623.379188] slab_unreclaimable 1008176 [ 2623.379188] slab 1116752 [ 2623.379188] workingset_refault_anon 0 [ 2623.379188] workingset_refault_file 5 [ 2623.379188] workingset_activate_anon 0 [ 2623.379188] workingset_activate_file 0 [ 2623.379188] workingset_restore_anon 0 [ 2623.379188] workingset_restore_file 0 [ 2623.379188] workingset_nodereclaim 0 [ 2623.379188] pgscan 2139 [ 2623.379188] pgsteal 1014 [ 2623.379188] pgscan_kswapd 0 [ 2623.379188] pgscan_direct 2139 [ 2623.379188] pgscan_khugepaged 0 [ 2623.379188] pgsteal_kswapd 0 [ 2623.379188] pgsteal_direct 1014 [ 2623.379188] pgsteal_khugepaged 0 [ 2623.379188] pgfault 1093096 [ 2623.379188] pgmajfault 0 [ 2623.379188] pgrefill 1170 [ 2623.379188] pgactivate 149040 [ 2623.379188] pgdeactivate 1145 [ 2623.379188] pglazyfree 0 [ 2623.379188] pglazyfreed 0 [ 2623.394985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11258,uid=0 [ 2623.396985] Memory cgroup out of memory: Killed process 11258 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2623.638117] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2623.639669] CPU: 0 PID: 11250 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2623.640793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2623.641822] Call Trace: [ 2623.642166] [ 2623.642469] dump_stack_lvl+0xc1/0xf0 [ 2623.643002] dump_header+0x10a/0xd50 [ 2623.643516] oom_kill_process+0x25d/0x600 [ 2623.644066] out_of_memory+0x35c/0x1660 [ 2623.644602] ? find_held_lock+0x2c/0x110 [ 2623.645147] ? __pfx_out_of_memory+0x10/0x10 [ 2623.645699] ? rcu_read_unlock+0x9/0x60 [ 2623.646227] ? lock_release+0x1e3/0x710 [ 2623.646744] ? lock_is_held_type+0x9f/0x120 [ 2623.647307] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2623.647931] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2623.648605] ? mem_cgroup_iter+0x291/0x710 [ 2623.649176] try_charge_memcg+0xec4/0x12e0 [ 2623.649724] ? lock_is_held_type+0x40/0x120 [ 2623.650298] ? __pfx_try_charge_memcg+0x10/0x10 [ 2623.650896] ? lock_release+0x1e3/0x710 [ 2623.651445] ? __pfx_lock_release+0x10/0x10 [ 2623.652002] ? trace_lock_acquire+0x170/0x1e0 [ 2623.652599] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2623.653214] ? lock_acquire+0x32/0xc0 [ 2623.653745] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2623.654484] charge_memcg+0x85/0x2c0 [ 2623.655032] __mem_cgroup_charge+0x28/0x90 [ 2623.655600] __handle_mm_fault+0x102b/0x31c0 [ 2623.656183] ? lock_acquire.part.0+0xec/0x320 [ 2623.656765] ? lock_is_held_type+0x9f/0x120 [ 2623.657326] ? __pfx___handle_mm_fault+0x10/0x10 [ 2623.657961] handle_mm_fault+0x1b8/0x860 [ 2623.658493] __get_user_pages+0x4d6/0x1060 [ 2623.659055] ? __pfx___get_user_pages+0x10/0x10 [ 2623.659664] ? __pfx_mt_find+0x10/0x10 [ 2623.660179] populate_vma_page_range+0x2e7/0x420 [ 2623.660793] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2623.661466] ? __pfx_find_vma_intersection+0x10/0x10 [ 2623.662110] ? lock_acquire+0x32/0xc0 [ 2623.662626] ? __mm_populate+0x228/0x3a0 [ 2623.663162] __mm_populate+0x102/0x3a0 [ 2623.663686] ? __pfx___mm_populate+0x10/0x10 [ 2623.664274] ? up_write+0x196/0x510 [ 2623.664753] __do_sys_mlockall+0x414/0x4a0 [ 2623.665301] do_syscall_64+0x3f/0x90 [ 2623.665801] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2623.666451] RIP: 0033:0x7ff90dfe0b19 [ 2623.666930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2623.669117] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2623.670037] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2623.670894] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2623.671756] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2623.672604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2623.673458] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2623.674358] [ 2623.675763] memory: usage 307200kB, limit 307200kB, failcnt 4488 [ 2623.676759] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2623.677540] Memory cgroup stats for /syz4: [ 2623.677764] anon 289349632 [ 2623.677764] file 20451328 [ 2623.677764] kernel 4771840 [ 2623.677764] kernel_stack 622592 [ 2623.677764] pagetables 3002368 [ 2623.677764] sec_pagetables 0 [ 2623.677764] percpu 1152 [ 2623.677764] sock 0 [ 2623.677764] vmalloc 0 [ 2623.677764] shmem 0 [ 2623.677764] file_mapped 20447232 [ 2623.677764] file_dirty 0 [ 2623.677764] file_writeback 0 [ 2623.677764] swapcached 0 [ 2623.677764] inactive_anon 259604480 [ 2623.677764] active_anon 0 [ 2623.677764] inactive_file 0 [ 2623.677764] active_file 4096 [ 2623.677764] unevictable 50192384 [ 2623.677764] slab_reclaimable 101520 [ 2623.677764] slab_unreclaimable 664160 [ 2623.677764] slab 765680 [ 2623.677764] workingset_refault_anon 0 [ 2623.677764] workingset_refault_file 8354 [ 2623.677764] workingset_activate_anon 0 [ 2623.677764] workingset_activate_file 22 [ 2623.677764] workingset_restore_anon 0 [ 2623.677764] workingset_restore_file 0 [ 2623.677764] workingset_nodereclaim 0 [ 2623.677764] pgscan 11378 [ 2623.677764] pgsteal 8370 [ 2623.677764] pgscan_kswapd 1 [ 2623.677764] pgscan_direct 11377 [ 2623.677764] pgscan_khugepaged 0 [ 2623.677764] pgsteal_kswapd 0 [ 2623.677764] pgsteal_direct 8370 [ 2623.677764] pgsteal_khugepaged 0 [ 2623.677764] pgfault 559292 [ 2623.677764] pgmajfault 27 [ 2623.677764] pgrefill 1476 [ 2623.677764] pgactivate 56100 [ 2623.677764] pgdeactivate 1476 [ 2623.677764] pglazyfree 0 [ 2623.677764] pglazyfreed 0 [ 2623.693101] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11249,uid=0 [ 2623.695073] Memory cgroup out of memory: Killed process 11249 (syz-executor.4) total-vm:93412kB, anon-rss:29096kB, file-rss:56320kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:34:13 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:34:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:34:13 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) 16:34:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:34:13 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0x0, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:34:13 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x0, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:13 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:34:13 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, 0x0, 0x0, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:34:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:34:13 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x0, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:34:13 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0x0, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:34:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:34:13 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x0, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:34:13 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0x0, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) [ 2637.851777] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2637.853181] CPU: 0 PID: 11294 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2637.854202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2637.855226] Call Trace: [ 2637.855572] [ 2637.855877] dump_stack_lvl+0xc1/0xf0 [ 2637.856402] dump_header+0x10a/0xd50 [ 2637.856911] oom_kill_process+0x25d/0x600 [ 2637.857457] out_of_memory+0x35c/0x1660 [ 2637.857982] ? find_held_lock+0x2c/0x110 [ 2637.858527] ? __pfx_out_of_memory+0x10/0x10 [ 2637.859095] ? rcu_read_unlock+0x9/0x60 [ 2637.859650] ? lock_release+0x1e3/0x710 [ 2637.860187] ? lock_is_held_type+0x9f/0x120 [ 2637.860779] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2637.861411] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2637.862109] ? mem_cgroup_iter+0x291/0x710 [ 2637.862673] try_charge_memcg+0xec4/0x12e0 [ 2637.863239] ? lock_is_held_type+0x40/0x120 [ 2637.863831] ? __pfx_try_charge_memcg+0x10/0x10 [ 2637.864453] ? lock_release+0x1e3/0x710 [ 2637.864996] ? __pfx_lock_release+0x10/0x10 [ 2637.865569] ? trace_lock_acquire+0x170/0x1e0 [ 2637.866177] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2637.866809] ? lock_acquire+0x32/0xc0 [ 2637.867319] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2637.867977] charge_memcg+0x85/0x2c0 [ 2637.868495] __mem_cgroup_charge+0x28/0x90 [ 2637.869043] __handle_mm_fault+0x102b/0x31c0 [ 2637.869621] ? lock_acquire.part.0+0xec/0x320 [ 2637.870223] ? lock_is_held_type+0x9f/0x120 [ 2637.870793] ? __pfx___handle_mm_fault+0x10/0x10 [ 2637.871462] handle_mm_fault+0x1b8/0x860 [ 2637.871997] __get_user_pages+0x4d6/0x1060 [ 2637.872571] ? __pfx___get_user_pages+0x10/0x10 [ 2637.873181] ? __pfx_mt_find+0x10/0x10 [ 2637.873710] populate_vma_page_range+0x2e7/0x420 [ 2637.874341] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2637.875019] ? __pfx_find_vma_intersection+0x10/0x10 [ 2637.875709] ? lock_acquire+0x32/0xc0 [ 2637.876221] ? __mm_populate+0x228/0x3a0 [ 2637.876770] __mm_populate+0x102/0x3a0 [ 2637.877287] ? __pfx___mm_populate+0x10/0x10 [ 2637.877875] ? up_write+0x196/0x510 [ 2637.878369] __do_sys_mlockall+0x414/0x4a0 [ 2637.878929] do_syscall_64+0x3f/0x90 [ 2637.879444] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2637.880128] RIP: 0033:0x7fd09934cb19 [ 2637.880604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2637.882819] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2637.883778] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2637.884672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2637.885557] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2637.886446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2637.887326] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2637.888258] [ 2637.889661] memory: usage 307200kB, limit 307200kB, failcnt 11304 [ 2637.890660] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2637.891480] Memory cgroup stats for /syz6: [ 2637.891700] anon 291074048 [ 2637.891700] file 16646144 [ 2637.891700] kernel 6852608 [ 2637.891700] kernel_stack 950272 [ 2637.891700] pagetables 4198400 [ 2637.891700] sec_pagetables 0 [ 2637.891700] percpu 1792 [ 2637.891700] sock 0 [ 2637.891700] vmalloc 0 [ 2637.891700] shmem 0 [ 2637.891700] file_mapped 16646144 [ 2637.891700] file_dirty 0 [ 2637.891700] file_writeback 0 [ 2637.891700] swapcached 0 [ 2637.891700] inactive_anon 269533184 [ 2637.891700] active_anon 0 [ 2637.891700] inactive_file 0 [ 2637.891700] active_file 0 [ 2637.891700] unevictable 38187008 [ 2637.891700] slab_reclaimable 108576 [ 2637.891700] slab_unreclaimable 1008176 [ 2637.891700] slab 1116752 [ 2637.891700] workingset_refault_anon 0 [ 2637.891700] workingset_refault_file 5 [ 2637.891700] workingset_activate_anon 0 [ 2637.891700] workingset_activate_file 0 [ 2637.891700] workingset_restore_anon 0 [ 2637.891700] workingset_restore_file 0 [ 2637.891700] workingset_nodereclaim 0 [ 2637.891700] pgscan 2139 [ 2637.891700] pgsteal 1014 [ 2637.891700] pgscan_kswapd 0 [ 2637.891700] pgscan_direct 2139 [ 2637.891700] pgscan_khugepaged 0 [ 2637.891700] pgsteal_kswapd 0 [ 2637.891700] pgsteal_direct 1014 [ 2637.891700] pgsteal_khugepaged 0 [ 2637.891700] pgfault 1098641 [ 2637.891700] pgmajfault 0 [ 2637.891700] pgrefill 1170 [ 2637.891700] pgactivate 149896 [ 2637.891700] pgdeactivate 1145 [ 2637.891700] pglazyfree 0 [ 2637.891700] pglazyfreed 0 [ 2637.906995] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11290,uid=0 [ 2637.908856] Memory cgroup out of memory: Killed process 11290 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2638.033731] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2638.035002] CPU: 1 PID: 11284 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2638.036007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2638.036982] Call Trace: [ 2638.037308] [ 2638.037598] dump_stack_lvl+0xc1/0xf0 [ 2638.038098] dump_header+0x10a/0xd50 [ 2638.038581] oom_kill_process+0x25d/0x600 [ 2638.039102] out_of_memory+0x35c/0x1660 [ 2638.039616] ? find_held_lock+0x2c/0x110 [ 2638.040134] ? __pfx_out_of_memory+0x10/0x10 [ 2638.040683] ? rcu_read_unlock+0x9/0x60 [ 2638.041206] ? lock_release+0x1e3/0x710 [ 2638.041724] ? lock_is_held_type+0x9f/0x120 [ 2638.042286] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2638.042893] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2638.043579] ? mem_cgroup_iter+0x291/0x710 [ 2638.044132] try_charge_memcg+0xec4/0x12e0 [ 2638.044679] ? lock_is_held_type+0x40/0x120 [ 2638.045236] ? __pfx_try_charge_memcg+0x10/0x10 [ 2638.045832] ? lock_release+0x1e3/0x710 [ 2638.046349] ? __pfx_lock_release+0x10/0x10 [ 2638.046902] ? trace_lock_acquire+0x170/0x1e0 [ 2638.047494] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2638.048103] ? lock_acquire+0x32/0xc0 [ 2638.048592] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2638.049209] charge_memcg+0x85/0x2c0 [ 2638.049700] __mem_cgroup_charge+0x28/0x90 [ 2638.050228] __handle_mm_fault+0x102b/0x31c0 [ 2638.050776] ? lock_acquire.part.0+0xec/0x320 [ 2638.051367] ? lock_is_held_type+0x9f/0x120 [ 2638.051929] ? __pfx___handle_mm_fault+0x10/0x10 [ 2638.052580] handle_mm_fault+0x1b8/0x860 [ 2638.053100] __get_user_pages+0x4d6/0x1060 [ 2638.053664] ? __pfx___get_user_pages+0x10/0x10 [ 2638.054308] ? __pfx_mt_find+0x10/0x10 [ 2638.054830] populate_vma_page_range+0x2e7/0x420 [ 2638.055464] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2638.056122] ? __pfx_find_vma_intersection+0x10/0x10 [ 2638.056780] ? lock_acquire+0x32/0xc0 [ 2638.057284] ? __mm_populate+0x228/0x3a0 [ 2638.057814] __mm_populate+0x102/0x3a0 [ 2638.058321] ? __pfx___mm_populate+0x10/0x10 [ 2638.058892] ? up_write+0x196/0x510 [ 2638.059367] __do_sys_mlockall+0x414/0x4a0 [ 2638.059909] do_syscall_64+0x3f/0x90 [ 2638.060399] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2638.061056] RIP: 0033:0x7ff90dfe0b19 [ 2638.061523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2638.063694] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2638.064612] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2638.065481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2638.066337] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2638.067192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2638.068066] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2638.068954] [ 2638.069361] memory: usage 307200kB, limit 307200kB, failcnt 4574 [ 2638.070142] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2638.070912] Memory cgroup stats for /syz4: [ 2638.071126] anon 289349632 [ 2638.071126] file 20451328 [ 2638.071126] kernel 4771840 [ 2638.071126] kernel_stack 622592 [ 2638.071126] pagetables 3002368 [ 2638.071126] sec_pagetables 0 [ 2638.071126] percpu 1152 [ 2638.071126] sock 0 [ 2638.071126] vmalloc 0 [ 2638.071126] shmem 0 [ 2638.071126] file_mapped 20447232 [ 2638.071126] file_dirty 4096 [ 2638.071126] file_writeback 0 [ 2638.071126] swapcached 0 [ 2638.071126] inactive_anon 259604480 [ 2638.071126] active_anon 0 [ 2638.071126] inactive_file 4096 [ 2638.071126] active_file 0 [ 2638.071126] unevictable 50192384 [ 2638.071126] slab_reclaimable 101520 [ 2638.071126] slab_unreclaimable 664160 [ 2638.071126] slab 765680 [ 2638.071126] workingset_refault_anon 0 [ 2638.071126] workingset_refault_file 8354 [ 2638.071126] workingset_activate_anon 0 [ 2638.071126] workingset_activate_file 22 [ 2638.071126] workingset_restore_anon 0 [ 2638.071126] workingset_restore_file 0 [ 2638.071126] workingset_nodereclaim 0 [ 2638.071126] pgscan 11396 [ 2638.071126] pgsteal 8370 [ 2638.071126] pgscan_kswapd 1 [ 2638.071126] pgscan_direct 11395 [ 2638.071126] pgscan_khugepaged 0 [ 2638.071126] pgsteal_kswapd 0 [ 2638.071126] pgsteal_direct 8370 [ 2638.071126] pgsteal_khugepaged 0 [ 2638.071126] pgfault 566916 [ 2638.071126] pgmajfault 27 [ 2638.071126] pgrefill 1496 [ 2638.071126] pgactivate 56939 [ 2638.071126] pgdeactivate 1496 [ 2638.071126] pglazyfree 0 [ 2638.071126] pglazyfreed 0 [ 2638.086569] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11283,uid=0 [ 2638.088510] Memory cgroup out of memory: Killed process 11283 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:34:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:34:27 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:34:27 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:34:27 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:27 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x0, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:34:27 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0x0, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:34:27 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:34:27 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) 16:34:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:34:27 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:27 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0x0, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:34:27 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x0, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:34:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:34:27 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:27 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0x0, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:34:27 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) [ 2651.732416] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2651.733472] CPU: 1 PID: 11329 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2651.734320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2651.735181] Call Trace: [ 2651.735465] [ 2651.735724] dump_stack_lvl+0xc1/0xf0 [ 2651.736166] dump_header+0x10a/0xd50 [ 2651.736586] oom_kill_process+0x25d/0x600 [ 2651.737042] out_of_memory+0x35c/0x1660 [ 2651.737486] ? find_held_lock+0x2c/0x110 [ 2651.737939] ? __pfx_out_of_memory+0x10/0x10 [ 2651.738412] ? rcu_read_unlock+0x9/0x60 [ 2651.738863] ? lock_release+0x1e3/0x710 [ 2651.739309] ? lock_is_held_type+0x9f/0x120 [ 2651.739804] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2651.740315] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2651.740889] ? mem_cgroup_iter+0x291/0x710 [ 2651.741368] try_charge_memcg+0xec4/0x12e0 [ 2651.741843] ? lock_is_held_type+0x40/0x120 [ 2651.742322] ? __pfx_try_charge_memcg+0x10/0x10 [ 2651.742830] ? lock_release+0x1e3/0x710 [ 2651.743276] ? __pfx_lock_release+0x10/0x10 [ 2651.743776] ? trace_lock_acquire+0x170/0x1e0 [ 2651.744292] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2651.744807] ? lock_acquire+0x32/0xc0 [ 2651.745229] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2651.745754] charge_memcg+0x85/0x2c0 [ 2651.746178] __mem_cgroup_charge+0x28/0x90 [ 2651.746626] __handle_mm_fault+0x102b/0x31c0 [ 2651.747095] ? lock_acquire.part.0+0xec/0x320 [ 2651.747592] ? lock_is_held_type+0x9f/0x120 [ 2651.748071] ? __pfx___handle_mm_fault+0x10/0x10 [ 2651.748625] handle_mm_fault+0x1b8/0x860 [ 2651.749065] __get_user_pages+0x4d6/0x1060 [ 2651.749546] ? __pfx___get_user_pages+0x10/0x10 [ 2651.750047] ? __pfx_mt_find+0x10/0x10 [ 2651.750485] populate_vma_page_range+0x2e7/0x420 [ 2651.750998] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2651.751553] ? __pfx_find_vma_intersection+0x10/0x10 [ 2651.752114] ? lock_acquire+0x32/0xc0 [ 2651.752534] ? __mm_populate+0x228/0x3a0 [ 2651.752991] __mm_populate+0x102/0x3a0 [ 2651.753423] ? __pfx___mm_populate+0x10/0x10 [ 2651.753914] ? up_write+0x196/0x510 [ 2651.754321] __do_sys_mlockall+0x414/0x4a0 [ 2651.754791] do_syscall_64+0x3f/0x90 [ 2651.755208] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2651.755785] RIP: 0033:0x7fd09934cb19 [ 2651.756188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2651.758024] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2651.758813] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2651.759546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2651.760297] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2651.761042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2651.761778] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2651.762543] [ 2651.762889] memory: usage 307200kB, limit 307200kB, failcnt 11347 [ 2651.763524] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2651.764191] Memory cgroup stats for /syz6: [ 2651.764373] anon 291074048 [ 2651.764373] file 16646144 [ 2651.764373] kernel 6852608 [ 2651.764373] kernel_stack 950272 [ 2651.764373] pagetables 4198400 [ 2651.764373] sec_pagetables 0 [ 2651.764373] percpu 1792 [ 2651.764373] sock 0 [ 2651.764373] vmalloc 0 [ 2651.764373] shmem 0 [ 2651.764373] file_mapped 16646144 [ 2651.764373] file_dirty 0 [ 2651.764373] file_writeback 0 [ 2651.764373] swapcached 0 [ 2651.764373] inactive_anon 269533184 [ 2651.764373] active_anon 0 [ 2651.764373] inactive_file 0 [ 2651.764373] active_file 0 [ 2651.764373] unevictable 38187008 [ 2651.764373] slab_reclaimable 108576 [ 2651.764373] slab_unreclaimable 1008176 [ 2651.764373] slab 1116752 [ 2651.764373] workingset_refault_anon 0 [ 2651.764373] workingset_refault_file 5 [ 2651.764373] workingset_activate_anon 0 [ 2651.764373] workingset_activate_file 0 [ 2651.764373] workingset_restore_anon 0 [ 2651.764373] workingset_restore_file 0 [ 2651.764373] workingset_nodereclaim 0 [ 2651.764373] pgscan 2139 [ 2651.764373] pgsteal 1014 [ 2651.764373] pgscan_kswapd 0 [ 2651.764373] pgscan_direct 2139 [ 2651.764373] pgscan_khugepaged 0 [ 2651.764373] pgsteal_kswapd 0 [ 2651.764373] pgsteal_direct 1014 [ 2651.764373] pgsteal_khugepaged 0 [ 2651.764373] pgfault 1104186 [ 2651.764373] pgmajfault 0 [ 2651.764373] pgrefill 1170 [ 2651.764373] pgactivate 150529 [ 2651.764373] pgdeactivate 1145 [ 2651.764373] pglazyfree 0 [ 2651.764373] pglazyfreed 0 [ 2651.777159] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11324,uid=0 [ 2651.778776] Memory cgroup out of memory: Killed process 11324 (syz-executor.6) total-vm:93412kB, anon-rss:21160kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2651.916184] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2651.917711] CPU: 1 PID: 11326 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2651.918478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2651.919256] Call Trace: [ 2651.919509] [ 2651.919752] dump_stack_lvl+0xc1/0xf0 [ 2651.920168] dump_header+0x10a/0xd50 [ 2651.920555] oom_kill_process+0x25d/0x600 [ 2651.920959] out_of_memory+0x35c/0x1660 [ 2651.921369] ? find_held_lock+0x2c/0x110 [ 2651.921782] ? __pfx_out_of_memory+0x10/0x10 [ 2651.922203] ? rcu_read_unlock+0x9/0x60 [ 2651.922612] ? lock_release+0x1e3/0x710 [ 2651.923021] ? lock_is_held_type+0x9f/0x120 [ 2651.923469] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2651.923931] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2651.924454] ? mem_cgroup_iter+0x291/0x710 [ 2651.924874] try_charge_memcg+0xec4/0x12e0 [ 2651.925303] ? lock_is_held_type+0x40/0x120 [ 2651.925720] ? __pfx_try_charge_memcg+0x10/0x10 [ 2651.926191] ? lock_release+0x1e3/0x710 [ 2651.926584] ? __pfx_lock_release+0x10/0x10 [ 2651.927020] ? trace_lock_acquire+0x170/0x1e0 [ 2651.927455] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2651.927958] ? lock_acquire+0x32/0xc0 [ 2651.928338] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2651.928839] charge_memcg+0x85/0x2c0 [ 2651.929230] __mem_cgroup_charge+0x28/0x90 [ 2651.929646] __handle_mm_fault+0x102b/0x31c0 [ 2651.930067] ? lock_acquire.part.0+0xec/0x320 [ 2651.930530] ? lock_is_held_type+0x9f/0x120 [ 2651.930943] ? __pfx___handle_mm_fault+0x10/0x10 [ 2651.931441] handle_mm_fault+0x1b8/0x860 [ 2651.931841] __get_user_pages+0x4d6/0x1060 [ 2651.932279] ? __pfx___get_user_pages+0x10/0x10 [ 2651.932724] ? __pfx_mt_find+0x10/0x10 [ 2651.933138] populate_vma_page_range+0x2e7/0x420 [ 2651.933611] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2651.934111] ? __pfx_find_vma_intersection+0x10/0x10 [ 2651.934619] ? lock_acquire+0x32/0xc0 [ 2651.934999] ? __mm_populate+0x228/0x3a0 [ 2651.935415] __mm_populate+0x102/0x3a0 [ 2651.935817] ? __pfx___mm_populate+0x10/0x10 [ 2651.936255] ? up_write+0x196/0x510 [ 2651.936613] __do_sys_mlockall+0x414/0x4a0 [ 2651.937025] do_syscall_64+0x3f/0x90 [ 2651.937397] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2651.937910] RIP: 0033:0x7ff90dfe0b19 [ 2651.938259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2651.939917] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2651.940628] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2651.941291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2651.941952] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2651.942615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2651.943281] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2651.943966] [ 2651.944838] memory: usage 307200kB, limit 307200kB, failcnt 4605 [ 2651.945434] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2651.946109] Memory cgroup stats for /syz4: [ 2651.946273] anon 289349632 [ 2651.946273] file 20451328 [ 2651.946273] kernel 4771840 [ 2651.946273] kernel_stack 622592 [ 2651.946273] pagetables 3002368 [ 2651.946273] sec_pagetables 0 [ 2651.946273] percpu 1152 [ 2651.946273] sock 0 [ 2651.946273] vmalloc 0 [ 2651.946273] shmem 0 [ 2651.946273] file_mapped 20447232 [ 2651.946273] file_dirty 4096 [ 2651.946273] file_writeback 0 [ 2651.946273] swapcached 0 [ 2651.946273] inactive_anon 259604480 [ 2651.946273] active_anon 0 [ 2651.946273] inactive_file 4096 [ 2651.946273] active_file 0 [ 2651.946273] unevictable 50192384 [ 2651.946273] slab_reclaimable 101520 [ 2651.946273] slab_unreclaimable 664160 [ 2651.946273] slab 765680 [ 2651.946273] workingset_refault_anon 0 [ 2651.946273] workingset_refault_file 8354 [ 2651.946273] workingset_activate_anon 0 [ 2651.946273] workingset_activate_file 22 [ 2651.946273] workingset_restore_anon 0 [ 2651.946273] workingset_restore_file 0 [ 2651.946273] workingset_nodereclaim 0 [ 2651.946273] pgscan 11406 [ 2651.946273] pgsteal 8370 [ 2651.946273] pgscan_kswapd 1 [ 2651.946273] pgscan_direct 11405 [ 2651.946273] pgscan_khugepaged 0 [ 2651.946273] pgsteal_kswapd 0 [ 2651.946273] pgsteal_direct 8370 [ 2651.946273] pgsteal_khugepaged 0 [ 2651.946273] pgfault 574540 [ 2651.946273] pgmajfault 27 [ 2651.946273] pgrefill 1507 [ 2651.946273] pgactivate 57647 [ 2651.946273] pgdeactivate 1507 [ 2651.946273] pglazyfree 0 [ 2651.946273] pglazyfreed 0 [ 2651.957573] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11325,uid=0 [ 2651.958968] Memory cgroup out of memory: Killed process 11325 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:34:40 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:34:40 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:34:40 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:34:40 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:34:40 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:40 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:34:40 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:34:40 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:34:40 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:41 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:41 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:34:41 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x0, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:34:41 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:34:41 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:41 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:34:41 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:41 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x0, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) [ 2665.022745] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2665.023469] CPU: 1 PID: 11374 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2665.024041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2665.024586] Call Trace: [ 2665.024765] [ 2665.024928] dump_stack_lvl+0xc1/0xf0 [ 2665.025207] dump_header+0x10a/0xd50 [ 2665.025476] oom_kill_process+0x25d/0x600 [ 2665.025764] out_of_memory+0x35c/0x1660 [ 2665.026050] ? find_held_lock+0x2c/0x110 [ 2665.026332] ? __pfx_out_of_memory+0x10/0x10 [ 2665.026631] ? rcu_read_unlock+0x9/0x60 [ 2665.026918] ? lock_release+0x1e3/0x710 [ 2665.027202] ? lock_is_held_type+0x9f/0x120 [ 2665.027514] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2665.027872] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2665.028245] ? mem_cgroup_iter+0x291/0x710 [ 2665.028547] try_charge_memcg+0xec4/0x12e0 [ 2665.028852] ? lock_is_held_type+0x40/0x120 [ 2665.029158] ? __pfx_try_charge_memcg+0x10/0x10 [ 2665.029484] ? lock_release+0x1e3/0x710 [ 2665.029764] ? __pfx_lock_release+0x10/0x10 [ 2665.030070] ? trace_lock_acquire+0x170/0x1e0 [ 2665.030387] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2665.030719] ? lock_acquire+0x32/0xc0 [ 2665.030994] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2665.031341] charge_memcg+0x85/0x2c0 [ 2665.031610] __mem_cgroup_charge+0x28/0x90 [ 2665.031907] __handle_mm_fault+0x102b/0x31c0 [ 2665.032213] ? lock_acquire.part.0+0xec/0x320 [ 2665.032529] ? lock_is_held_type+0x9f/0x120 [ 2665.032829] ? __pfx___handle_mm_fault+0x10/0x10 [ 2665.033169] handle_mm_fault+0x1b8/0x860 [ 2665.033462] __get_user_pages+0x4d6/0x1060 [ 2665.033765] ? __pfx___get_user_pages+0x10/0x10 [ 2665.034096] ? __pfx_mt_find+0x10/0x10 [ 2665.034375] populate_vma_page_range+0x2e7/0x420 [ 2665.034706] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2665.035057] ? __pfx_find_vma_intersection+0x10/0x10 [ 2665.035412] ? lock_acquire+0x32/0xc0 [ 2665.035681] ? __mm_populate+0x228/0x3a0 [ 2665.035992] __mm_populate+0x102/0x3a0 [ 2665.036277] ? __pfx___mm_populate+0x10/0x10 [ 2665.036590] ? up_write+0x196/0x510 [ 2665.036852] __do_sys_mlockall+0x414/0x4a0 [ 2665.037149] do_syscall_64+0x3f/0x90 [ 2665.037422] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2665.037779] RIP: 0033:0x7fd09934cb19 [ 2665.038038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.039204] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2665.039712] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2665.040200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2665.040691] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2665.041190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2665.041694] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2665.042211] [ 2665.043207] memory: usage 307200kB, limit 307200kB, failcnt 11435 [ 2665.043650] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2665.044282] Memory cgroup stats for /syz6: [ 2665.044425] anon 291074048 [ 2665.044425] file 16646144 [ 2665.044425] kernel 6852608 [ 2665.044425] kernel_stack 950272 [ 2665.044425] pagetables 4198400 [ 2665.044425] sec_pagetables 0 [ 2665.044425] percpu 1792 [ 2665.044425] sock 0 [ 2665.044425] vmalloc 0 [ 2665.044425] shmem 0 [ 2665.044425] file_mapped 16646144 [ 2665.044425] file_dirty 0 [ 2665.044425] file_writeback 0 [ 2665.044425] swapcached 0 [ 2665.044425] inactive_anon 269533184 [ 2665.044425] active_anon 0 [ 2665.044425] inactive_file 0 [ 2665.044425] active_file 0 [ 2665.044425] unevictable 38187008 [ 2665.044425] slab_reclaimable 108576 [ 2665.044425] slab_unreclaimable 1008176 [ 2665.044425] slab 1116752 [ 2665.044425] workingset_refault_anon 0 [ 2665.044425] workingset_refault_file 5 [ 2665.044425] workingset_activate_anon 0 [ 2665.044425] workingset_activate_file 0 [ 2665.044425] workingset_restore_anon 0 [ 2665.044425] workingset_restore_file 0 [ 2665.044425] workingset_nodereclaim 0 [ 2665.044425] pgscan 2139 [ 2665.044425] pgsteal 1014 [ 2665.044425] pgscan_kswapd 0 [ 2665.044425] pgscan_direct 2139 [ 2665.044425] pgscan_khugepaged 0 [ 2665.044425] pgsteal_kswapd 0 [ 2665.044425] pgsteal_direct 1014 [ 2665.044425] pgsteal_khugepaged 0 [ 2665.044425] pgfault 1109731 [ 2665.044425] pgmajfault 0 [ 2665.044425] pgrefill 1170 [ 2665.044425] pgactivate 151093 [ 2665.044425] pgdeactivate 1145 [ 2665.044425] pglazyfree 0 [ 2665.044425] pglazyfreed 0 [ 2665.053088] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11368,uid=0 [ 2665.054160] Memory cgroup out of memory: Killed process 11368 (syz-executor.6) total-vm:93412kB, anon-rss:21160kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2665.244157] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2665.244848] CPU: 1 PID: 11375 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2665.245385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2665.245928] Call Trace: [ 2665.246107] [ 2665.246268] dump_stack_lvl+0xc1/0xf0 [ 2665.246548] dump_header+0x10a/0xd50 [ 2665.246814] oom_kill_process+0x25d/0x600 [ 2665.247100] out_of_memory+0x35c/0x1660 [ 2665.247378] ? find_held_lock+0x2c/0x110 [ 2665.247666] ? __pfx_out_of_memory+0x10/0x10 [ 2665.247979] ? rcu_read_unlock+0x9/0x60 [ 2665.248262] ? lock_release+0x1e3/0x710 [ 2665.248544] ? lock_is_held_type+0x9f/0x120 [ 2665.248851] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2665.249185] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2665.249551] ? mem_cgroup_iter+0x291/0x710 [ 2665.249866] try_charge_memcg+0xec4/0x12e0 [ 2665.250167] ? lock_is_held_type+0x40/0x120 [ 2665.250478] ? __pfx_try_charge_memcg+0x10/0x10 [ 2665.250811] ? lock_release+0x1e3/0x710 [ 2665.251099] ? __pfx_lock_release+0x10/0x10 [ 2665.251409] ? trace_lock_acquire+0x170/0x1e0 [ 2665.251732] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2665.252081] ? lock_acquire+0x32/0xc0 [ 2665.252361] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2665.252715] charge_memcg+0x85/0x2c0 [ 2665.252996] __mem_cgroup_charge+0x28/0x90 [ 2665.253297] __handle_mm_fault+0x102b/0x31c0 [ 2665.253605] ? lock_acquire.part.0+0xec/0x320 [ 2665.253930] ? lock_is_held_type+0x9f/0x120 [ 2665.254235] ? __pfx___handle_mm_fault+0x10/0x10 [ 2665.254585] handle_mm_fault+0x1b8/0x860 [ 2665.254877] __get_user_pages+0x4d6/0x1060 [ 2665.255189] ? __pfx___get_user_pages+0x10/0x10 [ 2665.255526] ? __pfx_mt_find+0x10/0x10 [ 2665.255824] populate_vma_page_range+0x2e7/0x420 [ 2665.256154] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2665.256514] ? __pfx_find_vma_intersection+0x10/0x10 [ 2665.256880] ? lock_acquire+0x32/0xc0 [ 2665.257159] ? __mm_populate+0x228/0x3a0 [ 2665.257463] __mm_populate+0x102/0x3a0 [ 2665.257748] ? __pfx___mm_populate+0x10/0x10 [ 2665.258057] ? up_write+0x196/0x510 [ 2665.258328] __do_sys_mlockall+0x414/0x4a0 [ 2665.258623] do_syscall_64+0x3f/0x90 [ 2665.258904] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2665.259263] RIP: 0033:0x7ff90dfe0b19 [ 2665.259523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.260698] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2665.261223] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2665.261707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2665.262193] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2665.262667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2665.263150] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2665.263651] [ 2665.263893] memory: usage 307200kB, limit 307200kB, failcnt 4676 [ 2665.264312] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2665.264730] Memory cgroup stats for /syz4: [ 2665.264880] anon 289349632 [ 2665.264880] file 20451328 [ 2665.264880] kernel 4771840 [ 2665.264880] kernel_stack 622592 [ 2665.264880] pagetables 3002368 [ 2665.264880] sec_pagetables 0 [ 2665.264880] percpu 1152 [ 2665.264880] sock 0 [ 2665.264880] vmalloc 0 [ 2665.264880] shmem 0 [ 2665.264880] file_mapped 20447232 [ 2665.264880] file_dirty 4096 [ 2665.264880] file_writeback 0 [ 2665.264880] swapcached 0 [ 2665.264880] inactive_anon 259604480 [ 2665.264880] active_anon 0 [ 2665.264880] inactive_file 0 [ 2665.264880] active_file 4096 [ 2665.264880] unevictable 50192384 [ 2665.264880] slab_reclaimable 101520 [ 2665.264880] slab_unreclaimable 664160 [ 2665.264880] slab 765680 [ 2665.264880] workingset_refault_anon 0 [ 2665.264880] workingset_refault_file 8354 [ 2665.264880] workingset_activate_anon 0 [ 2665.264880] workingset_activate_file 22 [ 2665.264880] workingset_restore_anon 0 [ 2665.264880] workingset_restore_file 0 [ 2665.264880] workingset_nodereclaim 0 [ 2665.264880] pgscan 11426 [ 2665.264880] pgsteal 8370 [ 2665.264880] pgscan_kswapd 2 [ 2665.264880] pgscan_direct 11424 [ 2665.264880] pgscan_khugepaged 0 [ 2665.264880] pgsteal_kswapd 0 [ 2665.264880] pgsteal_direct 8370 [ 2665.264880] pgsteal_khugepaged 0 [ 2665.264880] pgfault 582164 [ 2665.264880] pgmajfault 27 [ 2665.264880] pgrefill 1527 [ 2665.264880] pgactivate 58542 [ 2665.264880] pgdeactivate 1527 [ 2665.264880] pglazyfree 0 [ 2665.264880] pglazyfreed 0 [ 2665.273434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11372,uid=0 [ 2665.274484] Memory cgroup out of memory: Killed process 11372 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56320kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:34:55 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:55 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:34:55 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:34:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:34:55 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:34:55 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:34:55 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x0, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:34:55 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x0, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:34:55 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x0, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:34:55 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:34:55 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x0, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:34:55 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:34:55 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x0, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) [ 2679.704342] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2679.705054] CPU: 1 PID: 11411 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2679.705607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2679.706144] Call Trace: [ 2679.706326] [ 2679.706488] dump_stack_lvl+0xc1/0xf0 [ 2679.706773] dump_header+0x10a/0xd50 [ 2679.707047] oom_kill_process+0x25d/0x600 [ 2679.707338] out_of_memory+0x35c/0x1660 [ 2679.707616] ? find_held_lock+0x2c/0x110 [ 2679.707900] ? __pfx_out_of_memory+0x10/0x10 [ 2679.708212] ? rcu_read_unlock+0x9/0x60 [ 2679.708501] ? lock_release+0x1e3/0x710 [ 2679.708783] ? lock_is_held_type+0x9f/0x120 [ 2679.709105] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2679.709452] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2679.709837] ? mem_cgroup_iter+0x291/0x710 [ 2679.710157] try_charge_memcg+0xec4/0x12e0 [ 2679.710472] ? lock_is_held_type+0x40/0x120 [ 2679.710795] ? __pfx_try_charge_memcg+0x10/0x10 [ 2679.711144] ? lock_release+0x1e3/0x710 [ 2679.711444] ? __pfx_lock_release+0x10/0x10 [ 2679.711759] ? trace_lock_acquire+0x170/0x1e0 [ 2679.712099] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2679.712447] ? lock_acquire+0x32/0xc0 [ 2679.712734] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2679.713088] charge_memcg+0x85/0x2c0 [ 2679.713373] __mem_cgroup_charge+0x28/0x90 [ 2679.713684] __handle_mm_fault+0x102b/0x31c0 [ 2679.713999] ? lock_acquire.part.0+0xec/0x320 [ 2679.714333] ? lock_is_held_type+0x9f/0x120 [ 2679.714647] ? __pfx___handle_mm_fault+0x10/0x10 [ 2679.715011] handle_mm_fault+0x1b8/0x860 [ 2679.715307] __get_user_pages+0x4d6/0x1060 [ 2679.715624] ? __pfx___get_user_pages+0x10/0x10 [ 2679.715961] ? __pfx_mt_find+0x10/0x10 [ 2679.716258] populate_vma_page_range+0x2e7/0x420 [ 2679.716601] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2679.716975] ? __pfx_find_vma_intersection+0x10/0x10 [ 2679.717347] ? lock_acquire+0x32/0xc0 [ 2679.717639] ? __mm_populate+0x228/0x3a0 [ 2679.717941] __mm_populate+0x102/0x3a0 [ 2679.718233] ? __pfx___mm_populate+0x10/0x10 [ 2679.718562] ? up_write+0x196/0x510 [ 2679.718839] __do_sys_mlockall+0x414/0x4a0 [ 2679.719148] do_syscall_64+0x3f/0x90 [ 2679.719422] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2679.719798] RIP: 0033:0x7fd09934cb19 [ 2679.720083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2679.721350] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2679.721880] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2679.722374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2679.722865] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2679.723366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2679.723858] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2679.724378] [ 2679.724625] memory: usage 307200kB, limit 307200kB, failcnt 11466 [ 2679.725077] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2679.725502] Memory cgroup stats for /syz6: [ 2679.725628] anon 291074048 [ 2679.725628] file 16646144 [ 2679.725628] kernel 6852608 [ 2679.725628] kernel_stack 950272 [ 2679.725628] pagetables 4198400 [ 2679.725628] sec_pagetables 0 [ 2679.725628] percpu 1792 [ 2679.725628] sock 0 [ 2679.725628] vmalloc 0 [ 2679.725628] shmem 0 [ 2679.725628] file_mapped 16646144 [ 2679.725628] file_dirty 0 [ 2679.725628] file_writeback 0 [ 2679.725628] swapcached 0 [ 2679.725628] inactive_anon 269533184 [ 2679.725628] active_anon 0 [ 2679.725628] inactive_file 0 [ 2679.725628] active_file 0 [ 2679.725628] unevictable 38187008 [ 2679.725628] slab_reclaimable 108576 [ 2679.725628] slab_unreclaimable 1008176 [ 2679.725628] slab 1116752 [ 2679.725628] workingset_refault_anon 0 [ 2679.725628] workingset_refault_file 5 [ 2679.725628] workingset_activate_anon 0 [ 2679.725628] workingset_activate_file 0 [ 2679.725628] workingset_restore_anon 0 [ 2679.725628] workingset_restore_file 0 [ 2679.725628] workingset_nodereclaim 0 [ 2679.725628] pgscan 2139 [ 2679.725628] pgsteal 1014 [ 2679.725628] pgscan_kswapd 0 [ 2679.725628] pgscan_direct 2139 [ 2679.725628] pgscan_khugepaged 0 [ 2679.725628] pgsteal_kswapd 0 [ 2679.725628] pgsteal_direct 1014 [ 2679.725628] pgsteal_khugepaged 0 [ 2679.725628] pgfault 1115276 [ 2679.725628] pgmajfault 0 [ 2679.725628] pgrefill 1170 [ 2679.725628] pgactivate 151646 [ 2679.725628] pgdeactivate 1145 [ 2679.725628] pglazyfree 0 [ 2679.725628] pglazyfreed 0 [ 2679.734266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11400,uid=0 [ 2679.735350] Memory cgroup out of memory: Killed process 11400 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51840kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2679.815710] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2679.816416] CPU: 1 PID: 11407 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2679.816966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2679.817507] Call Trace: [ 2679.817692] [ 2679.817856] dump_stack_lvl+0xc1/0xf0 [ 2679.818135] dump_header+0x10a/0xd50 [ 2679.818411] oom_kill_process+0x25d/0x600 [ 2679.818707] out_of_memory+0x35c/0x1660 [ 2679.818988] ? find_held_lock+0x2c/0x110 [ 2679.819281] ? __pfx_out_of_memory+0x10/0x10 [ 2679.819583] ? rcu_read_unlock+0x9/0x60 [ 2679.819879] ? lock_release+0x1e3/0x710 [ 2679.820187] ? lock_is_held_type+0x9f/0x120 [ 2679.820499] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2679.820838] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2679.821230] ? mem_cgroup_iter+0x291/0x710 [ 2679.821540] try_charge_memcg+0xec4/0x12e0 [ 2679.821850] ? lock_is_held_type+0x40/0x120 [ 2679.822161] ? __pfx_try_charge_memcg+0x10/0x10 [ 2679.822497] ? lock_release+0x1e3/0x710 [ 2679.822785] ? __pfx_lock_release+0x10/0x10 [ 2679.823084] ? trace_lock_acquire+0x170/0x1e0 [ 2679.823413] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2679.823742] ? lock_acquire+0x32/0xc0 [ 2679.824028] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2679.824367] charge_memcg+0x85/0x2c0 [ 2679.824645] __mem_cgroup_charge+0x28/0x90 [ 2679.824941] __handle_mm_fault+0x102b/0x31c0 [ 2679.825252] ? lock_acquire.part.0+0xec/0x320 [ 2679.825571] ? lock_is_held_type+0x9f/0x120 [ 2679.825882] ? __pfx___handle_mm_fault+0x10/0x10 [ 2679.826227] handle_mm_fault+0x1b8/0x860 [ 2679.826515] __get_user_pages+0x4d6/0x1060 [ 2679.826825] ? __pfx___get_user_pages+0x10/0x10 [ 2679.827156] ? __pfx_mt_find+0x10/0x10 [ 2679.827443] populate_vma_page_range+0x2e7/0x420 [ 2679.827781] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2679.828163] ? __pfx_find_vma_intersection+0x10/0x10 [ 2679.828525] ? lock_acquire+0x32/0xc0 [ 2679.828803] ? __mm_populate+0x228/0x3a0 [ 2679.829098] __mm_populate+0x102/0x3a0 [ 2679.829377] ? __pfx___mm_populate+0x10/0x10 [ 2679.829699] ? up_write+0x196/0x510 [ 2679.829969] __do_sys_mlockall+0x414/0x4a0 [ 2679.830271] do_syscall_64+0x3f/0x90 [ 2679.830545] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2679.830908] RIP: 0033:0x7ff90dfe0b19 [ 2679.831163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2679.832355] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2679.832861] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2679.833337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2679.833813] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2679.834317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2679.834818] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2679.835337] [ 2679.835588] memory: usage 307200kB, limit 307200kB, failcnt 4727 [ 2679.836044] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2679.836473] Memory cgroup stats for /syz4: [ 2679.836604] anon 289349632 [ 2679.836604] file 20451328 [ 2679.836604] kernel 4771840 [ 2679.836604] kernel_stack 622592 [ 2679.836604] pagetables 3002368 [ 2679.836604] sec_pagetables 0 [ 2679.836604] percpu 1152 [ 2679.836604] sock 0 [ 2679.836604] vmalloc 0 [ 2679.836604] shmem 0 [ 2679.836604] file_mapped 20447232 [ 2679.836604] file_dirty 4096 [ 2679.836604] file_writeback 0 [ 2679.836604] swapcached 0 [ 2679.836604] inactive_anon 259604480 [ 2679.836604] active_anon 0 [ 2679.836604] inactive_file 4096 [ 2679.836604] active_file 0 [ 2679.836604] unevictable 50192384 [ 2679.836604] slab_reclaimable 101520 [ 2679.836604] slab_unreclaimable 664160 [ 2679.836604] slab 765680 [ 2679.836604] workingset_refault_anon 0 [ 2679.836604] workingset_refault_file 8354 [ 2679.836604] workingset_activate_anon 0 [ 2679.836604] workingset_activate_file 22 [ 2679.836604] workingset_restore_anon 0 [ 2679.836604] workingset_restore_file 0 [ 2679.836604] workingset_nodereclaim 0 [ 2679.836604] pgscan 11436 [ 2679.836604] pgsteal 8370 [ 2679.836604] pgscan_kswapd 2 [ 2679.836604] pgscan_direct 11434 [ 2679.836604] pgscan_khugepaged 0 [ 2679.836604] pgsteal_kswapd 0 [ 2679.836604] pgsteal_direct 8370 [ 2679.836604] pgsteal_khugepaged 0 [ 2679.836604] pgfault 589788 [ 2679.836604] pgmajfault 27 [ 2679.836604] pgrefill 1539 [ 2679.836604] pgactivate 59309 [ 2679.836604] pgdeactivate 1539 [ 2679.836604] pglazyfree 0 [ 2679.836604] pglazyfreed 0 [ 2679.845352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11403,uid=0 [ 2679.846390] Memory cgroup out of memory: Killed process 11403 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:35:08 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:35:08 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) 16:35:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:35:08 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x0, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:35:08 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x0, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:35:08 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:35:08 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) 16:35:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:08 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:35:08 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:35:08 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x0, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:35:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:08 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:35:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:08 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) [ 2692.483303] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2692.484025] CPU: 1 PID: 11436 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2692.484612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2692.485183] Call Trace: [ 2692.485370] [ 2692.485535] dump_stack_lvl+0xc1/0xf0 [ 2692.485835] dump_header+0x10a/0xd50 [ 2692.486114] oom_kill_process+0x25d/0x600 [ 2692.486418] out_of_memory+0x35c/0x1660 [ 2692.486712] ? find_held_lock+0x2c/0x110 [ 2692.487011] ? __pfx_out_of_memory+0x10/0x10 [ 2692.487329] ? rcu_read_unlock+0x9/0x60 [ 2692.487627] ? lock_release+0x1e3/0x710 [ 2692.487924] ? lock_is_held_type+0x9f/0x120 [ 2692.488258] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2692.488608] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2692.488997] ? mem_cgroup_iter+0x291/0x710 [ 2692.489318] try_charge_memcg+0xec4/0x12e0 [ 2692.489633] ? lock_is_held_type+0x40/0x120 [ 2692.489954] ? __pfx_try_charge_memcg+0x10/0x10 [ 2692.490298] ? lock_release+0x1e3/0x710 [ 2692.490596] ? __pfx_lock_release+0x10/0x10 [ 2692.490916] ? trace_lock_acquire+0x170/0x1e0 [ 2692.491251] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2692.491589] ? lock_acquire+0x32/0xc0 [ 2692.491877] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2692.492231] charge_memcg+0x85/0x2c0 [ 2692.492515] __mem_cgroup_charge+0x28/0x90 [ 2692.492821] __handle_mm_fault+0x102b/0x31c0 [ 2692.493154] ? lock_acquire.part.0+0xec/0x320 [ 2692.493489] ? lock_is_held_type+0x9f/0x120 [ 2692.493806] ? __pfx___handle_mm_fault+0x10/0x10 [ 2692.494171] handle_mm_fault+0x1b8/0x860 [ 2692.494470] __get_user_pages+0x4d6/0x1060 [ 2692.494787] ? __pfx___get_user_pages+0x10/0x10 [ 2692.495115] ? __pfx_mt_find+0x10/0x10 [ 2692.495411] populate_vma_page_range+0x2e7/0x420 [ 2692.495747] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2692.496128] ? __pfx_find_vma_intersection+0x10/0x10 [ 2692.496492] ? lock_acquire+0x32/0xc0 [ 2692.496777] ? __mm_populate+0x228/0x3a0 [ 2692.497069] __mm_populate+0x102/0x3a0 [ 2692.497361] ? __pfx___mm_populate+0x10/0x10 [ 2692.497673] ? up_write+0x196/0x510 [ 2692.497949] __do_sys_mlockall+0x414/0x4a0 [ 2692.498247] do_syscall_64+0x3f/0x90 [ 2692.498530] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2692.498887] RIP: 0033:0x7fd09934cb19 [ 2692.499157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2692.500352] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2692.500888] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2692.501351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2692.501849] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2692.502350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2692.502852] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2692.503363] [ 2692.503619] memory: usage 307200kB, limit 307200kB, failcnt 11489 [ 2692.504100] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2692.504857] Memory cgroup stats for /syz6: [ 2692.504966] anon 291074048 [ 2692.504966] file 16646144 [ 2692.504966] kernel 6852608 [ 2692.504966] kernel_stack 950272 [ 2692.504966] pagetables 4198400 [ 2692.504966] sec_pagetables 0 [ 2692.504966] percpu 1792 [ 2692.504966] sock 0 [ 2692.504966] vmalloc 0 [ 2692.504966] shmem 0 [ 2692.504966] file_mapped 16646144 [ 2692.504966] file_dirty 0 [ 2692.504966] file_writeback 0 [ 2692.504966] swapcached 0 [ 2692.504966] inactive_anon 269533184 [ 2692.504966] active_anon 0 [ 2692.504966] inactive_file 0 [ 2692.504966] active_file 0 [ 2692.504966] unevictable 38158336 [ 2692.504966] slab_reclaimable 108576 [ 2692.504966] slab_unreclaimable 1008176 [ 2692.504966] slab 1116752 [ 2692.504966] workingset_refault_anon 0 [ 2692.504966] workingset_refault_file 5 [ 2692.504966] workingset_activate_anon 0 [ 2692.504966] workingset_activate_file 0 [ 2692.504966] workingset_restore_anon 0 [ 2692.504966] workingset_restore_file 0 [ 2692.504966] workingset_nodereclaim 0 [ 2692.504966] pgscan 2139 [ 2692.504966] pgsteal 1014 [ 2692.504966] pgscan_kswapd 0 [ 2692.504966] pgscan_direct 2139 [ 2692.504966] pgscan_khugepaged 0 [ 2692.504966] pgsteal_kswapd 0 [ 2692.504966] pgsteal_direct 1014 [ 2692.504966] pgsteal_khugepaged 0 [ 2692.504966] pgfault 1120821 [ 2692.504966] pgmajfault 0 [ 2692.504966] pgrefill 1170 [ 2692.504966] pgactivate 152165 [ 2692.504966] pgdeactivate 1145 [ 2692.504966] pglazyfree 0 [ 2692.504966] pglazyfreed 0 [ 2692.513655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11435,uid=0 [ 2692.514702] Memory cgroup out of memory: Killed process 11435 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51840kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2692.663500] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2692.664834] CPU: 0 PID: 11444 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2692.665864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2692.666859] Call Trace: [ 2692.667198] [ 2692.667496] dump_stack_lvl+0xc1/0xf0 [ 2692.668010] dump_header+0x10a/0xd50 [ 2692.668529] oom_kill_process+0x25d/0x600 [ 2692.669072] out_of_memory+0x35c/0x1660 [ 2692.669604] ? find_held_lock+0x2c/0x110 [ 2692.670131] ? __pfx_out_of_memory+0x10/0x10 [ 2692.670698] ? rcu_read_unlock+0x9/0x60 [ 2692.671238] ? lock_release+0x1e3/0x710 [ 2692.671759] ? lock_is_held_type+0x9f/0x120 [ 2692.672347] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2692.673010] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2692.673730] ? mem_cgroup_iter+0x291/0x710 [ 2692.674334] try_charge_memcg+0xec4/0x12e0 [ 2692.674917] ? lock_is_held_type+0x40/0x120 [ 2692.675524] ? __pfx_try_charge_memcg+0x10/0x10 [ 2692.676164] ? lock_release+0x1e3/0x710 [ 2692.676740] ? __pfx_lock_release+0x10/0x10 [ 2692.677345] ? trace_lock_acquire+0x170/0x1e0 [ 2692.677965] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2692.678594] ? lock_acquire+0x32/0xc0 [ 2692.679127] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2692.679774] charge_memcg+0x85/0x2c0 [ 2692.680305] __mem_cgroup_charge+0x28/0x90 [ 2692.680884] __handle_mm_fault+0x102b/0x31c0 [ 2692.681479] ? lock_acquire.part.0+0xec/0x320 [ 2692.682100] ? lock_is_held_type+0x9f/0x120 [ 2692.682682] ? __pfx___handle_mm_fault+0x10/0x10 [ 2692.683351] handle_mm_fault+0x1b8/0x860 [ 2692.683912] __get_user_pages+0x4d6/0x1060 [ 2692.684512] ? __pfx___get_user_pages+0x10/0x10 [ 2692.685147] ? __pfx_mt_find+0x10/0x10 [ 2692.685690] populate_vma_page_range+0x2e7/0x420 [ 2692.686334] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2692.687025] ? __pfx_find_vma_intersection+0x10/0x10 [ 2692.687714] ? lock_acquire+0x32/0xc0 [ 2692.688263] ? __mm_populate+0x228/0x3a0 [ 2692.688825] __mm_populate+0x102/0x3a0 [ 2692.689363] ? __pfx___mm_populate+0x10/0x10 [ 2692.689977] ? up_write+0x196/0x510 [ 2692.690479] __do_sys_mlockall+0x414/0x4a0 [ 2692.691056] do_syscall_64+0x3f/0x90 [ 2692.691584] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2692.692281] RIP: 0033:0x7ff90dfe0b19 [ 2692.692772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2692.695051] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2692.696046] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2692.696998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2692.697904] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2692.698833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2692.699742] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2692.700687] [ 2692.702157] memory: usage 307200kB, limit 307200kB, failcnt 4790 [ 2692.703192] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2692.704010] Memory cgroup stats for /syz4: [ 2692.704256] anon 289349632 [ 2692.704256] file 20451328 [ 2692.704256] kernel 4771840 [ 2692.704256] kernel_stack 622592 [ 2692.704256] pagetables 3002368 [ 2692.704256] sec_pagetables 0 [ 2692.704256] percpu 1152 [ 2692.704256] sock 0 [ 2692.704256] vmalloc 0 [ 2692.704256] shmem 0 [ 2692.704256] file_mapped 20447232 [ 2692.704256] file_dirty 0 [ 2692.704256] file_writeback 0 [ 2692.704256] swapcached 0 [ 2692.704256] inactive_anon 259604480 [ 2692.704256] active_anon 0 [ 2692.704256] inactive_file 0 [ 2692.704256] active_file 4096 [ 2692.704256] unevictable 50192384 [ 2692.704256] slab_reclaimable 101520 [ 2692.704256] slab_unreclaimable 664160 [ 2692.704256] slab 765680 [ 2692.704256] workingset_refault_anon 0 [ 2692.704256] workingset_refault_file 8354 [ 2692.704256] workingset_activate_anon 0 [ 2692.704256] workingset_activate_file 22 [ 2692.704256] workingset_restore_anon 0 [ 2692.704256] workingset_restore_file 0 [ 2692.704256] workingset_nodereclaim 0 [ 2692.704256] pgscan 11450 [ 2692.704256] pgsteal 8370 [ 2692.704256] pgscan_kswapd 2 [ 2692.704256] pgscan_direct 11448 [ 2692.704256] pgscan_khugepaged 0 [ 2692.704256] pgsteal_kswapd 0 [ 2692.704256] pgsteal_direct 8370 [ 2692.704256] pgsteal_khugepaged 0 [ 2692.704256] pgfault 597412 [ 2692.704256] pgmajfault 27 [ 2692.704256] pgrefill 1552 [ 2692.704256] pgactivate 60043 [ 2692.704256] pgdeactivate 1552 [ 2692.704256] pglazyfree 0 [ 2692.704256] pglazyfreed 0 [ 2692.719991] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11441,uid=0 [ 2692.721934] Memory cgroup out of memory: Killed process 11441 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:35:23 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:35:23 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:23 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x0, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:35:23 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) 16:35:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:35:23 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:35:23 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x0, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:35:23 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:35:23 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:23 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x0, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:35:23 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x0, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:35:23 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x0, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:35:23 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x0, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:35:23 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x0, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:35:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2707.590046] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2707.590728] CPU: 0 PID: 11482 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2707.591273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2707.591817] Call Trace: [ 2707.591996] [ 2707.592156] dump_stack_lvl+0xc1/0xf0 [ 2707.592445] dump_header+0x10a/0xd50 [ 2707.592719] oom_kill_process+0x25d/0x600 [ 2707.593011] out_of_memory+0x35c/0x1660 [ 2707.593288] ? find_held_lock+0x2c/0x110 [ 2707.593575] ? __pfx_out_of_memory+0x10/0x10 [ 2707.593874] ? rcu_read_unlock+0x9/0x60 [ 2707.594163] ? lock_release+0x1e3/0x710 [ 2707.594445] ? lock_is_held_type+0x9f/0x120 [ 2707.594750] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2707.595086] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2707.595454] ? mem_cgroup_iter+0x291/0x710 [ 2707.595766] try_charge_memcg+0xec4/0x12e0 [ 2707.596063] ? lock_is_held_type+0x40/0x120 [ 2707.596363] ? __pfx_try_charge_memcg+0x10/0x10 [ 2707.596707] ? lock_release+0x1e3/0x710 [ 2707.596995] ? __pfx_lock_release+0x10/0x10 [ 2707.597296] ? trace_lock_acquire+0x170/0x1e0 [ 2707.597622] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2707.597957] ? lock_acquire+0x32/0xc0 [ 2707.598227] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2707.598567] charge_memcg+0x85/0x2c0 [ 2707.598836] __mem_cgroup_charge+0x28/0x90 [ 2707.599124] __handle_mm_fault+0x102b/0x31c0 [ 2707.599421] ? lock_acquire.part.0+0xec/0x320 [ 2707.599747] ? lock_is_held_type+0x9f/0x120 [ 2707.600048] ? __pfx___handle_mm_fault+0x10/0x10 [ 2707.600399] handle_mm_fault+0x1b8/0x860 [ 2707.600701] __get_user_pages+0x4d6/0x1060 [ 2707.601012] ? __pfx___get_user_pages+0x10/0x10 [ 2707.601348] ? __pfx_mt_find+0x10/0x10 [ 2707.601629] populate_vma_page_range+0x2e7/0x420 [ 2707.601987] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2707.602352] ? __pfx_find_vma_intersection+0x10/0x10 [ 2707.602735] ? lock_acquire+0x32/0xc0 [ 2707.603014] ? __mm_populate+0x228/0x3a0 [ 2707.603317] __mm_populate+0x102/0x3a0 [ 2707.603603] ? __pfx___mm_populate+0x10/0x10 [ 2707.603943] ? up_write+0x196/0x510 [ 2707.604206] __do_sys_mlockall+0x414/0x4a0 [ 2707.604530] do_syscall_64+0x3f/0x90 [ 2707.604818] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2707.605200] RIP: 0033:0x7fd09934cb19 [ 2707.605475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2707.606727] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2707.607264] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2707.607778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2707.608285] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2707.608800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2707.609296] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2707.609829] [ 2707.610092] memory: usage 307200kB, limit 307200kB, failcnt 11576 [ 2707.610533] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2707.610993] Memory cgroup stats for /syz6: [ 2707.611122] anon 291074048 [ 2707.611122] file 16646144 [ 2707.611122] kernel 6852608 [ 2707.611122] kernel_stack 950272 [ 2707.611122] pagetables 4198400 [ 2707.611122] sec_pagetables 0 [ 2707.611122] percpu 1792 [ 2707.611122] sock 0 [ 2707.611122] vmalloc 0 [ 2707.611122] shmem 0 [ 2707.611122] file_mapped 16646144 [ 2707.611122] file_dirty 0 [ 2707.611122] file_writeback 0 [ 2707.611122] swapcached 0 [ 2707.611122] inactive_anon 269533184 [ 2707.611122] active_anon 0 [ 2707.611122] inactive_file 0 [ 2707.611122] active_file 0 [ 2707.611122] unevictable 38187008 [ 2707.611122] slab_reclaimable 108576 [ 2707.611122] slab_unreclaimable 1008176 [ 2707.611122] slab 1116752 [ 2707.611122] workingset_refault_anon 0 [ 2707.611122] workingset_refault_file 5 [ 2707.611122] workingset_activate_anon 0 [ 2707.611122] workingset_activate_file 0 [ 2707.611122] workingset_restore_anon 0 [ 2707.611122] workingset_restore_file 0 [ 2707.611122] workingset_nodereclaim 0 [ 2707.611122] pgscan 2139 [ 2707.611122] pgsteal 1014 [ 2707.611122] pgscan_kswapd 0 [ 2707.611122] pgscan_direct 2139 [ 2707.611122] pgscan_khugepaged 0 [ 2707.611122] pgsteal_kswapd 0 [ 2707.611122] pgsteal_direct 1014 [ 2707.611122] pgsteal_khugepaged 0 [ 2707.611122] pgfault 1126366 [ 2707.611122] pgmajfault 0 [ 2707.611122] pgrefill 1170 [ 2707.611122] pgactivate 152785 [ 2707.611122] pgdeactivate 1145 [ 2707.611122] pglazyfree 0 [ 2707.611122] pglazyfreed 0 [ 2707.619550] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11472,uid=0 [ 2707.620587] Memory cgroup out of memory: Killed process 11472 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51840kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2707.709486] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2707.710207] CPU: 0 PID: 11469 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2707.710790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2707.711366] Call Trace: [ 2707.711554] [ 2707.711721] dump_stack_lvl+0xc1/0xf0 [ 2707.712018] dump_header+0x10a/0xd50 [ 2707.712301] oom_kill_process+0x25d/0x600 [ 2707.712615] out_of_memory+0x35c/0x1660 [ 2707.712917] ? find_held_lock+0x2c/0x110 [ 2707.713231] ? __pfx_out_of_memory+0x10/0x10 [ 2707.713557] ? rcu_read_unlock+0x9/0x60 [ 2707.713871] ? lock_release+0x1e3/0x710 [ 2707.714177] ? lock_is_held_type+0x9f/0x120 [ 2707.714508] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2707.714868] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2707.715212] ? mem_cgroup_iter+0x291/0x710 [ 2707.715548] try_charge_memcg+0xec4/0x12e0 [ 2707.715874] ? lock_is_held_type+0x40/0x120 [ 2707.716162] ? __pfx_try_charge_memcg+0x10/0x10 [ 2707.716526] ? lock_release+0x1e3/0x710 [ 2707.716833] ? __pfx_lock_release+0x10/0x10 [ 2707.717157] ? trace_lock_acquire+0x170/0x1e0 [ 2707.717497] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2707.717858] ? lock_acquire+0x32/0xc0 [ 2707.718159] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2707.718526] charge_memcg+0x85/0x2c0 [ 2707.718820] __mem_cgroup_charge+0x28/0x90 [ 2707.719136] __handle_mm_fault+0x102b/0x31c0 [ 2707.719466] ? lock_acquire.part.0+0xec/0x320 [ 2707.719800] ? lock_is_held_type+0x9f/0x120 [ 2707.720086] ? __pfx___handle_mm_fault+0x10/0x10 [ 2707.720493] handle_mm_fault+0x1b8/0x860 [ 2707.720795] __get_user_pages+0x4d6/0x1060 [ 2707.721117] ? __pfx___get_user_pages+0x10/0x10 [ 2707.721465] ? __pfx_mt_find+0x10/0x10 [ 2707.721768] populate_vma_page_range+0x2e7/0x420 [ 2707.722125] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2707.722518] ? __pfx_find_vma_intersection+0x10/0x10 [ 2707.722899] ? lock_acquire+0x32/0xc0 [ 2707.723188] ? __mm_populate+0x228/0x3a0 [ 2707.723495] __mm_populate+0x102/0x3a0 [ 2707.723790] ? __pfx___mm_populate+0x10/0x10 [ 2707.724080] ? up_write+0x196/0x510 [ 2707.724355] __do_sys_mlockall+0x414/0x4a0 [ 2707.724683] do_syscall_64+0x3f/0x90 [ 2707.724974] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2707.725354] RIP: 0033:0x7ff90dfe0b19 [ 2707.725630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2707.726913] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2707.727460] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2707.727968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2707.728480] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2707.728998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2707.729506] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2707.730038] [ 2707.730247] memory: usage 307200kB, limit 307200kB, failcnt 4836 [ 2707.730684] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2707.731136] Memory cgroup stats for /syz4: [ 2707.731246] anon 289349632 [ 2707.731246] file 20451328 [ 2707.731246] kernel 4771840 [ 2707.731246] kernel_stack 622592 [ 2707.731246] pagetables 3002368 [ 2707.731246] sec_pagetables 0 [ 2707.731246] percpu 1152 [ 2707.731246] sock 0 [ 2707.731246] vmalloc 0 [ 2707.731246] shmem 0 [ 2707.731246] file_mapped 20447232 [ 2707.731246] file_dirty 0 [ 2707.731246] file_writeback 0 [ 2707.731246] swapcached 0 [ 2707.731246] inactive_anon 259604480 [ 2707.731246] active_anon 0 [ 2707.731246] inactive_file 0 [ 2707.731246] active_file 4096 [ 2707.731246] unevictable 50192384 [ 2707.731246] slab_reclaimable 101520 [ 2707.731246] slab_unreclaimable 664160 [ 2707.731246] slab 765680 [ 2707.731246] workingset_refault_anon 0 [ 2707.731246] workingset_refault_file 8354 [ 2707.731246] workingset_activate_anon 0 [ 2707.731246] workingset_activate_file 22 [ 2707.731246] workingset_restore_anon 0 [ 2707.731246] workingset_restore_file 0 [ 2707.731246] workingset_nodereclaim 0 [ 2707.731246] pgscan 11466 [ 2707.731246] pgsteal 8370 [ 2707.731246] pgscan_kswapd 2 [ 2707.731246] pgscan_direct 11464 [ 2707.731246] pgscan_khugepaged 0 [ 2707.731246] pgsteal_kswapd 0 [ 2707.731246] pgsteal_direct 8370 [ 2707.731246] pgsteal_khugepaged 0 [ 2707.731246] pgfault 605037 [ 2707.731246] pgmajfault 27 [ 2707.731246] pgrefill 1569 [ 2707.731246] pgactivate 60836 [ 2707.731246] pgdeactivate 1569 [ 2707.731246] pglazyfree 0 [ 2707.731246] pglazyfreed 0 [ 2707.740099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11467,uid=0 [ 2707.741211] Memory cgroup out of memory: Killed process 11467 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:35:36 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:35:36 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) 16:35:36 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x0, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:35:36 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x0, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 16:35:36 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:35:36 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:35:36 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:35:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 16:35:36 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x0, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:35:36 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x0, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:36 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:35:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 16:35:37 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x0, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:35:37 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2721.165781] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2721.167261] CPU: 0 PID: 11519 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2721.168263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2721.169278] Call Trace: [ 2721.169623] [ 2721.169917] dump_stack_lvl+0xc1/0xf0 [ 2721.170429] dump_header+0x10a/0xd50 [ 2721.170948] oom_kill_process+0x25d/0x600 [ 2721.171492] out_of_memory+0x35c/0x1660 [ 2721.172021] ? find_held_lock+0x2c/0x110 [ 2721.172575] ? __pfx_out_of_memory+0x10/0x10 [ 2721.173137] ? rcu_read_unlock+0x9/0x60 [ 2721.173676] ? lock_release+0x1e3/0x710 [ 2721.174200] ? lock_is_held_type+0x9f/0x120 [ 2721.174787] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2721.175403] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2721.176087] ? mem_cgroup_iter+0x291/0x710 [ 2721.176680] try_charge_memcg+0xec4/0x12e0 [ 2721.177234] ? lock_is_held_type+0x40/0x120 [ 2721.177802] ? __pfx_try_charge_memcg+0x10/0x10 [ 2721.178403] ? lock_release+0x1e3/0x710 [ 2721.178954] ? __pfx_lock_release+0x10/0x10 [ 2721.179529] ? trace_lock_acquire+0x170/0x1e0 [ 2721.180109] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2721.180738] ? lock_acquire+0x32/0xc0 [ 2721.181244] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2721.181879] charge_memcg+0x85/0x2c0 [ 2721.182383] __mem_cgroup_charge+0x28/0x90 [ 2721.182947] __handle_mm_fault+0x102b/0x31c0 [ 2721.183539] ? lock_acquire.part.0+0xec/0x320 [ 2721.184123] ? lock_is_held_type+0x9f/0x120 [ 2721.184715] ? __pfx___handle_mm_fault+0x10/0x10 [ 2721.185362] handle_mm_fault+0x1b8/0x860 [ 2721.185907] __get_user_pages+0x4d6/0x1060 [ 2721.186488] ? __pfx___get_user_pages+0x10/0x10 [ 2721.187124] ? __pfx_mt_find+0x10/0x10 [ 2721.187663] populate_vma_page_range+0x2e7/0x420 [ 2721.188274] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2721.188954] ? __pfx_find_vma_intersection+0x10/0x10 [ 2721.189631] ? lock_acquire+0x32/0xc0 [ 2721.190152] ? __mm_populate+0x228/0x3a0 [ 2721.190717] __mm_populate+0x102/0x3a0 [ 2721.191228] ? __pfx___mm_populate+0x10/0x10 [ 2721.191821] ? up_write+0x196/0x510 [ 2721.192306] __do_sys_mlockall+0x414/0x4a0 [ 2721.192879] do_syscall_64+0x3f/0x90 [ 2721.193380] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2721.194048] RIP: 0033:0x7fd09934cb19 [ 2721.194546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2721.196737] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2721.197666] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2721.198554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2721.199407] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2721.200267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2721.201149] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2721.202041] [ 2721.202470] memory: usage 307200kB, limit 307200kB, failcnt 11618 [ 2721.203274] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2721.204065] Memory cgroup stats for /syz6: [ 2721.204294] anon 291074048 [ 2721.204294] file 16646144 [ 2721.204294] kernel 6852608 [ 2721.204294] kernel_stack 950272 [ 2721.204294] pagetables 4198400 [ 2721.204294] sec_pagetables 0 [ 2721.204294] percpu 1792 [ 2721.204294] sock 0 [ 2721.204294] vmalloc 0 [ 2721.204294] shmem 0 [ 2721.204294] file_mapped 16646144 [ 2721.204294] file_dirty 0 [ 2721.204294] file_writeback 0 [ 2721.204294] swapcached 0 [ 2721.204294] inactive_anon 269533184 [ 2721.204294] active_anon 0 [ 2721.204294] inactive_file 0 [ 2721.204294] active_file 0 [ 2721.204294] unevictable 38187008 [ 2721.204294] slab_reclaimable 108576 [ 2721.204294] slab_unreclaimable 1008176 [ 2721.204294] slab 1116752 [ 2721.204294] workingset_refault_anon 0 [ 2721.204294] workingset_refault_file 5 [ 2721.204294] workingset_activate_anon 0 [ 2721.204294] workingset_activate_file 0 [ 2721.204294] workingset_restore_anon 0 [ 2721.204294] workingset_restore_file 0 [ 2721.204294] workingset_nodereclaim 0 [ 2721.204294] pgscan 2142 [ 2721.204294] pgsteal 1014 [ 2721.204294] pgscan_kswapd 3 [ 2721.204294] pgscan_direct 2139 [ 2721.204294] pgscan_khugepaged 0 [ 2721.204294] pgsteal_kswapd 0 [ 2721.204294] pgsteal_direct 1014 [ 2721.204294] pgsteal_khugepaged 0 [ 2721.204294] pgfault 1131911 [ 2721.204294] pgmajfault 0 [ 2721.204294] pgrefill 1170 [ 2721.204294] pgactivate 153605 [ 2721.204294] pgdeactivate 1145 [ 2721.204294] pglazyfree 0 [ 2721.204294] pglazyfreed 0 [ 2721.220831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11515,uid=0 [ 2721.223235] Memory cgroup out of memory: Killed process 11515 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2721.226017] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2721.227250] CPU: 1 PID: 11511 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2721.228185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2721.229132] Call Trace: [ 2721.229452] [ 2721.229728] dump_stack_lvl+0xc1/0xf0 [ 2721.230209] dump_header+0x10a/0xd50 [ 2721.230664] oom_kill_process+0x25d/0x600 [ 2721.231169] out_of_memory+0x35c/0x1660 [ 2721.231655] ? __pfx_out_of_memory+0x10/0x10 [ 2721.232176] ? rcu_read_unlock+0x9/0x60 [ 2721.232694] ? lock_release+0x1e3/0x710 [ 2721.233184] ? lock_is_held_type+0x9f/0x120 [ 2721.233727] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2721.234310] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2721.234944] ? mem_cgroup_iter+0x291/0x710 [ 2721.235466] try_charge_memcg+0xec4/0x12e0 [ 2721.235985] ? lock_is_held_type+0x40/0x120 [ 2721.236514] ? __pfx_try_charge_memcg+0x10/0x10 [ 2721.237098] ? lock_release+0x1e3/0x710 [ 2721.237587] ? __pfx_lock_release+0x10/0x10 [ 2721.238112] ? trace_lock_acquire+0x170/0x1e0 [ 2721.238663] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2721.239233] ? lock_acquire+0x32/0xc0 [ 2721.239705] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2721.240297] charge_memcg+0x85/0x2c0 [ 2721.240786] __mem_cgroup_charge+0x28/0x90 [ 2721.241292] __handle_mm_fault+0x102b/0x31c0 [ 2721.241822] ? lock_acquire.part.0+0xec/0x320 [ 2721.242374] ? lock_is_held_type+0x9f/0x120 [ 2721.242902] ? __pfx___handle_mm_fault+0x10/0x10 [ 2721.243501] handle_mm_fault+0x1b8/0x860 [ 2721.244000] __get_user_pages+0x4d6/0x1060 [ 2721.244525] ? __pfx___get_user_pages+0x10/0x10 [ 2721.245119] ? __pfx_mt_find+0x10/0x10 [ 2721.245609] populate_vma_page_range+0x2e7/0x420 [ 2721.246179] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2721.246789] ? __pfx_find_vma_intersection+0x10/0x10 [ 2721.247400] ? lock_acquire+0x32/0xc0 [ 2721.247871] ? __mm_populate+0x228/0x3a0 [ 2721.248372] __mm_populate+0x102/0x3a0 [ 2721.248855] ? __pfx___mm_populate+0x10/0x10 [ 2721.249394] ? up_write+0x196/0x510 [ 2721.249850] __do_sys_mlockall+0x414/0x4a0 [ 2721.250355] do_syscall_64+0x3f/0x90 [ 2721.250818] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2721.251434] RIP: 0033:0x7ff90dfe0b19 [ 2721.251868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2721.253876] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2721.254731] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2721.255533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2721.256328] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2721.257143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2721.257935] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2721.258757] [ 2721.260327] memory: usage 307200kB, limit 307200kB, failcnt 4943 [ 2721.261331] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2721.262060] Memory cgroup stats for /syz4: [ 2721.262278] anon 289337344 [ 2721.262278] file 20451328 [ 2721.262278] kernel 4784128 [ 2721.262278] kernel_stack 622592 [ 2721.262278] pagetables 3002368 [ 2721.262278] sec_pagetables 0 [ 2721.262278] percpu 1152 [ 2721.262278] sock 0 [ 2721.262278] vmalloc 0 [ 2721.262278] shmem 0 [ 2721.262278] file_mapped 20447232 [ 2721.262278] file_dirty 0 [ 2721.262278] file_writeback 0 [ 2721.262278] swapcached 0 [ 2721.262278] inactive_anon 259604480 [ 2721.262278] active_anon 0 [ 2721.262278] inactive_file 0 [ 2721.262278] active_file 4096 [ 2721.262278] unevictable 50180096 [ 2721.262278] slab_reclaimable 113648 [ 2721.262278] slab_unreclaimable 664160 [ 2721.262278] slab 777808 [ 2721.262278] workingset_refault_anon 0 [ 2721.262278] workingset_refault_file 8354 [ 2721.262278] workingset_activate_anon 0 [ 2721.262278] workingset_activate_file 22 [ 2721.262278] workingset_restore_anon 0 [ 2721.262278] workingset_restore_file 0 [ 2721.262278] workingset_nodereclaim 0 [ 2721.262278] pgscan 11492 [ 2721.262278] pgsteal 8370 [ 2721.262278] pgscan_kswapd 3 [ 2721.262278] pgscan_direct 11489 [ 2721.262278] pgscan_khugepaged 0 [ 2721.262278] pgsteal_kswapd 0 [ 2721.262278] pgsteal_direct 8370 [ 2721.262278] pgsteal_khugepaged 0 [ 2721.262278] pgfault 612658 [ 2721.262278] pgmajfault 27 [ 2721.262278] pgrefill 1595 [ 2721.262278] pgactivate 61666 [ 2721.262278] pgdeactivate 1595 [ 2721.262278] pglazyfree 0 [ 2721.262278] pglazyfreed 0 [ 2721.276460] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11508,uid=0 [ 2721.278259] Memory cgroup out of memory: Killed process 11508 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:35:51 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0x0, 0x0], 0x2, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:35:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:51 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:35:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:35:51 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x0, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:35:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:35:51 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) 16:35:51 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:35:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:35:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:35:51 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x0, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:35:51 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:35:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:35:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:35:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) [ 2735.204541] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2735.205283] CPU: 0 PID: 11556 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2735.205835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2735.206390] Call Trace: [ 2735.206576] [ 2735.206740] dump_stack_lvl+0xc1/0xf0 [ 2735.207029] dump_header+0x10a/0xd50 [ 2735.207299] oom_kill_process+0x25d/0x600 [ 2735.207586] out_of_memory+0x35c/0x1660 [ 2735.207872] ? find_held_lock+0x2c/0x110 [ 2735.208166] ? __pfx_out_of_memory+0x10/0x10 [ 2735.208476] ? rcu_read_unlock+0x9/0x60 [ 2735.208778] ? lock_release+0x1e3/0x710 [ 2735.209067] ? lock_is_held_type+0x9f/0x120 [ 2735.209380] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2735.209716] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2735.210084] ? mem_cgroup_iter+0x291/0x710 [ 2735.210395] try_charge_memcg+0xec4/0x12e0 [ 2735.210698] ? lock_is_held_type+0x40/0x120 [ 2735.211010] ? __pfx_try_charge_memcg+0x10/0x10 [ 2735.211343] ? lock_release+0x1e3/0x710 [ 2735.211640] ? __pfx_lock_release+0x10/0x10 [ 2735.211943] ? trace_lock_acquire+0x170/0x1e0 [ 2735.212268] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2735.212605] ? lock_acquire+0x32/0xc0 [ 2735.212893] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2735.213239] charge_memcg+0x85/0x2c0 [ 2735.213512] __mem_cgroup_charge+0x28/0x90 [ 2735.213805] __handle_mm_fault+0x102b/0x31c0 [ 2735.214113] ? lock_acquire.part.0+0xec/0x320 [ 2735.214436] ? lock_is_held_type+0x9f/0x120 [ 2735.214745] ? __pfx___handle_mm_fault+0x10/0x10 [ 2735.215096] handle_mm_fault+0x1b8/0x860 [ 2735.215387] __get_user_pages+0x4d6/0x1060 [ 2735.215699] ? __pfx___get_user_pages+0x10/0x10 [ 2735.216049] ? __pfx_mt_find+0x10/0x10 [ 2735.216350] populate_vma_page_range+0x2e7/0x420 [ 2735.216700] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2735.217105] ? __pfx_find_vma_intersection+0x10/0x10 [ 2735.217486] ? lock_acquire+0x32/0xc0 [ 2735.217778] ? __mm_populate+0x228/0x3a0 [ 2735.218090] __mm_populate+0x102/0x3a0 [ 2735.218391] ? __pfx___mm_populate+0x10/0x10 [ 2735.218724] ? up_write+0x196/0x510 [ 2735.219002] __do_sys_mlockall+0x414/0x4a0 [ 2735.219320] do_syscall_64+0x3f/0x90 [ 2735.219606] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2735.219996] RIP: 0033:0x7fd09934cb19 [ 2735.220271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2735.221553] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2735.222108] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2735.222607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2735.223128] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2735.223657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2735.224179] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2735.224708] [ 2735.224951] memory: usage 307200kB, limit 307200kB, failcnt 11638 [ 2735.225402] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2735.225866] Memory cgroup stats for /syz6: [ 2735.225995] anon 291074048 [ 2735.225995] file 16646144 [ 2735.225995] kernel 6852608 [ 2735.225995] kernel_stack 950272 [ 2735.225995] pagetables 4198400 [ 2735.225995] sec_pagetables 0 [ 2735.225995] percpu 1792 [ 2735.225995] sock 0 [ 2735.225995] vmalloc 0 [ 2735.225995] shmem 0 [ 2735.225995] file_mapped 16646144 [ 2735.225995] file_dirty 0 [ 2735.225995] file_writeback 0 [ 2735.225995] swapcached 0 [ 2735.225995] inactive_anon 269533184 [ 2735.225995] active_anon 0 [ 2735.225995] inactive_file 0 [ 2735.225995] active_file 0 [ 2735.225995] unevictable 38187008 [ 2735.225995] slab_reclaimable 108576 [ 2735.225995] slab_unreclaimable 1008176 [ 2735.225995] slab 1116752 [ 2735.225995] workingset_refault_anon 0 [ 2735.225995] workingset_refault_file 5 [ 2735.225995] workingset_activate_anon 0 [ 2735.225995] workingset_activate_file 0 [ 2735.225995] workingset_restore_anon 0 [ 2735.225995] workingset_restore_file 0 [ 2735.225995] workingset_nodereclaim 0 [ 2735.225995] pgscan 2142 [ 2735.225995] pgsteal 1014 [ 2735.225995] pgscan_kswapd 3 [ 2735.225995] pgscan_direct 2139 [ 2735.225995] pgscan_khugepaged 0 [ 2735.225995] pgsteal_kswapd 0 [ 2735.225995] pgsteal_direct 1014 [ 2735.225995] pgsteal_khugepaged 0 [ 2735.225995] pgfault 1137456 [ 2735.225995] pgmajfault 0 [ 2735.225995] pgrefill 1170 [ 2735.225995] pgactivate 154150 [ 2735.225995] pgdeactivate 1145 [ 2735.225995] pglazyfree 0 [ 2735.225995] pglazyfreed 0 [ 2735.234807] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11555,uid=0 [ 2735.235916] Memory cgroup out of memory: Killed process 11555 (syz-executor.6) total-vm:93412kB, anon-rss:21160kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2735.298703] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2735.299378] CPU: 0 PID: 11557 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2735.299959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2735.300523] Call Trace: [ 2735.300709] [ 2735.300899] dump_stack_lvl+0xc1/0xf0 [ 2735.301191] dump_header+0x10a/0xd50 [ 2735.301467] oom_kill_process+0x25d/0x600 [ 2735.301769] out_of_memory+0x35c/0x1660 [ 2735.302072] ? find_held_lock+0x2c/0x110 [ 2735.302375] ? __pfx_out_of_memory+0x10/0x10 [ 2735.302694] ? rcu_read_unlock+0x9/0x60 [ 2735.302999] ? lock_release+0x1e3/0x710 [ 2735.303303] ? lock_is_held_type+0x9f/0x120 [ 2735.303616] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2735.303977] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2735.304359] ? mem_cgroup_iter+0x291/0x710 [ 2735.304688] try_charge_memcg+0xec4/0x12e0 [ 2735.305012] ? lock_is_held_type+0x40/0x120 [ 2735.305339] ? __pfx_try_charge_memcg+0x10/0x10 [ 2735.305677] ? lock_release+0x1e3/0x710 [ 2735.305982] ? __pfx_lock_release+0x10/0x10 [ 2735.306301] ? trace_lock_acquire+0x170/0x1e0 [ 2735.306623] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2735.306975] ? lock_acquire+0x32/0xc0 [ 2735.307262] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2735.307627] charge_memcg+0x85/0x2c0 [ 2735.307923] __mem_cgroup_charge+0x28/0x90 [ 2735.308235] __handle_mm_fault+0x102b/0x31c0 [ 2735.308541] ? lock_acquire.part.0+0xec/0x320 [ 2735.308897] ? lock_is_held_type+0x9f/0x120 [ 2735.309224] ? __pfx___handle_mm_fault+0x10/0x10 [ 2735.309586] handle_mm_fault+0x1b8/0x860 [ 2735.309894] __get_user_pages+0x4d6/0x1060 [ 2735.310216] ? __pfx___get_user_pages+0x10/0x10 [ 2735.310561] ? __pfx_mt_find+0x10/0x10 [ 2735.310860] populate_vma_page_range+0x2e7/0x420 [ 2735.311218] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2735.311597] ? __pfx_find_vma_intersection+0x10/0x10 [ 2735.311972] ? lock_acquire+0x32/0xc0 [ 2735.312248] ? __mm_populate+0x228/0x3a0 [ 2735.312553] __mm_populate+0x102/0x3a0 [ 2735.312839] ? __pfx___mm_populate+0x10/0x10 [ 2735.313166] ? up_write+0x196/0x510 [ 2735.313444] __do_sys_mlockall+0x414/0x4a0 [ 2735.313756] do_syscall_64+0x3f/0x90 [ 2735.314042] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2735.314409] RIP: 0033:0x7ff90dfe0b19 [ 2735.314678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2735.315857] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2735.316396] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2735.316882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2735.317352] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2735.317824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2735.318290] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2735.318783] [ 2735.319017] memory: usage 307200kB, limit 307200kB, failcnt 5010 [ 2735.319432] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2735.319869] Memory cgroup stats for /syz4: [ 2735.319994] anon 289349632 [ 2735.319994] file 20451328 [ 2735.319994] kernel 4771840 [ 2735.319994] kernel_stack 622592 [ 2735.319994] pagetables 3002368 [ 2735.319994] sec_pagetables 0 [ 2735.319994] percpu 1152 [ 2735.319994] sock 0 [ 2735.319994] vmalloc 0 [ 2735.319994] shmem 0 [ 2735.319994] file_mapped 20447232 [ 2735.319994] file_dirty 4096 [ 2735.319994] file_writeback 0 [ 2735.319994] swapcached 0 [ 2735.319994] inactive_anon 259604480 [ 2735.319994] active_anon 0 [ 2735.319994] inactive_file 4096 [ 2735.319994] active_file 0 [ 2735.319994] unevictable 50192384 [ 2735.319994] slab_reclaimable 101520 [ 2735.319994] slab_unreclaimable 664160 [ 2735.319994] slab 765680 [ 2735.319994] workingset_refault_anon 0 [ 2735.319994] workingset_refault_file 8354 [ 2735.319994] workingset_activate_anon 0 [ 2735.319994] workingset_activate_file 22 [ 2735.319994] workingset_restore_anon 0 [ 2735.319994] workingset_restore_file 0 [ 2735.319994] workingset_nodereclaim 0 [ 2735.319994] pgscan 11503 [ 2735.319994] pgsteal 8370 [ 2735.319994] pgscan_kswapd 3 [ 2735.319994] pgscan_direct 11500 [ 2735.319994] pgscan_khugepaged 0 [ 2735.319994] pgsteal_kswapd 0 [ 2735.319994] pgsteal_direct 8370 [ 2735.319994] pgsteal_khugepaged 0 [ 2735.319994] pgfault 620282 [ 2735.319994] pgmajfault 27 [ 2735.319994] pgrefill 1608 [ 2735.319994] pgactivate 62444 [ 2735.319994] pgdeactivate 1608 [ 2735.319994] pglazyfree 0 [ 2735.319994] pglazyfreed 0 [ 2735.328762] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11554,uid=0 [ 2735.329898] Memory cgroup out of memory: Killed process 11554 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:36:05 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:05 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) 16:36:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:36:05 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:05 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:36:05 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:05 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:36:05 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0x0, 0x0], 0x2, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:36:05 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:06 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:36:06 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:36:06 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:06 executing program 3: mlockall(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) 16:36:06 executing program 7: mlockall(0x0) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:06 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 16:36:06 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2749.953601] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2749.954431] CPU: 1 PID: 11585 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2749.955031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.955607] Call Trace: [ 2749.955802] [ 2749.955972] dump_stack_lvl+0xc1/0xf0 [ 2749.956270] dump_header+0x10a/0xd50 [ 2749.956556] oom_kill_process+0x25d/0x600 [ 2749.956868] out_of_memory+0x35c/0x1660 [ 2749.957563] ? find_held_lock+0x2c/0x110 [ 2749.958198] ? __pfx_out_of_memory+0x10/0x10 [ 2749.958880] ? rcu_read_unlock+0x9/0x60 [ 2749.959509] ? lock_release+0x1e3/0x710 [ 2749.960128] ? lock_is_held_type+0x9f/0x120 [ 2749.960806] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2749.961566] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2749.962383] ? mem_cgroup_iter+0x291/0x710 [ 2749.963072] try_charge_memcg+0xec4/0x12e0 [ 2749.963732] ? lock_is_held_type+0x40/0x120 [ 2749.964417] ? __pfx_try_charge_memcg+0x10/0x10 [ 2749.965158] ? lock_release+0x1e3/0x710 [ 2749.965797] ? __pfx_lock_release+0x10/0x10 [ 2749.966471] ? trace_lock_acquire+0x170/0x1e0 [ 2749.967166] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2749.967894] ? lock_acquire+0x32/0xc0 [ 2749.968498] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2749.969268] charge_memcg+0x85/0x2c0 [ 2749.969827] __mem_cgroup_charge+0x28/0x90 [ 2749.970411] __handle_mm_fault+0x102b/0x31c0 [ 2749.971006] ? lock_acquire.part.0+0xec/0x320 [ 2749.971643] ? lock_is_held_type+0x9f/0x120 [ 2749.972243] ? __pfx___handle_mm_fault+0x10/0x10 [ 2749.972941] handle_mm_fault+0x1b8/0x860 [ 2749.973519] __get_user_pages+0x4d6/0x1060 [ 2749.974129] ? __pfx___get_user_pages+0x10/0x10 [ 2749.974779] ? __pfx_mt_find+0x10/0x10 [ 2749.975338] populate_vma_page_range+0x2e7/0x420 [ 2749.976001] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2749.976713] ? __pfx_find_vma_intersection+0x10/0x10 [ 2749.977419] ? lock_acquire+0x32/0xc0 [ 2749.977957] ? __mm_populate+0x228/0x3a0 [ 2749.978530] __mm_populate+0x102/0x3a0 [ 2749.979077] ? __pfx___mm_populate+0x10/0x10 [ 2749.979692] ? up_write+0x196/0x510 [ 2749.980208] __do_sys_mlockall+0x414/0x4a0 [ 2749.980784] do_syscall_64+0x3f/0x90 [ 2749.981339] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2749.982041] RIP: 0033:0x7fd09934cb19 [ 2749.982550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.984795] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2749.985796] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2749.986736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2749.987666] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2749.988591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2749.989540] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2749.990505] [ 2749.990940] memory: usage 307200kB, limit 307200kB, failcnt 11691 [ 2749.991717] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2749.992613] Memory cgroup stats for /syz6: [ 2749.992890] anon 291074048 [ 2749.992890] file 16646144 [ 2749.992890] kernel 6852608 [ 2749.992890] kernel_stack 950272 [ 2749.992890] pagetables 4198400 [ 2749.992890] sec_pagetables 0 [ 2749.992890] percpu 1792 [ 2749.992890] sock 0 [ 2749.992890] vmalloc 0 [ 2749.992890] shmem 0 [ 2749.992890] file_mapped 16646144 [ 2749.992890] file_dirty 0 [ 2749.992890] file_writeback 0 [ 2749.992890] swapcached 0 [ 2749.992890] inactive_anon 269533184 [ 2749.992890] active_anon 0 [ 2749.992890] inactive_file 0 [ 2749.992890] active_file 0 [ 2749.992890] unevictable 38187008 [ 2749.992890] slab_reclaimable 108576 [ 2749.992890] slab_unreclaimable 1008176 [ 2749.992890] slab 1116752 [ 2749.992890] workingset_refault_anon 0 [ 2749.992890] workingset_refault_file 5 [ 2749.992890] workingset_activate_anon 0 [ 2749.992890] workingset_activate_file 0 [ 2749.992890] workingset_restore_anon 0 [ 2749.992890] workingset_restore_file 0 [ 2749.992890] workingset_nodereclaim 0 [ 2749.992890] pgscan 2142 [ 2749.992890] pgsteal 1014 [ 2749.992890] pgscan_kswapd 3 [ 2749.992890] pgscan_direct 2139 [ 2749.992890] pgscan_khugepaged 0 [ 2749.992890] pgsteal_kswapd 0 [ 2749.992890] pgsteal_direct 1014 [ 2749.992890] pgsteal_khugepaged 0 [ 2749.992890] pgfault 1143001 [ 2749.992890] pgmajfault 0 [ 2749.992890] pgrefill 1170 [ 2749.992890] pgactivate 154755 [ 2749.992890] pgdeactivate 1145 [ 2749.992890] pglazyfree 0 [ 2749.992890] pglazyfreed 0 [ 2750.009571] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11584,uid=0 [ 2750.011577] Memory cgroup out of memory: Killed process 11584 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2750.202669] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2750.203975] CPU: 0 PID: 11595 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2750.205003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2750.205998] Call Trace: [ 2750.206327] [ 2750.206628] dump_stack_lvl+0xc1/0xf0 [ 2750.207151] dump_header+0x10a/0xd50 [ 2750.207640] oom_kill_process+0x25d/0x600 [ 2750.208175] out_of_memory+0x35c/0x1660 [ 2750.208698] ? find_held_lock+0x2c/0x110 [ 2750.209239] ? __pfx_out_of_memory+0x10/0x10 [ 2750.209807] ? rcu_read_unlock+0x9/0x60 [ 2750.210337] ? lock_release+0x1e3/0x710 [ 2750.210857] ? lock_is_held_type+0x9f/0x120 [ 2750.211430] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2750.212053] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2750.212752] ? mem_cgroup_iter+0x291/0x710 [ 2750.213322] try_charge_memcg+0xec4/0x12e0 [ 2750.213905] ? lock_is_held_type+0x40/0x120 [ 2750.214479] ? __pfx_try_charge_memcg+0x10/0x10 [ 2750.215090] ? lock_release+0x1e3/0x710 [ 2750.215610] ? __pfx_lock_release+0x10/0x10 [ 2750.216185] ? trace_lock_acquire+0x170/0x1e0 [ 2750.216778] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2750.217435] ? lock_acquire+0x32/0xc0 [ 2750.217944] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2750.218588] charge_memcg+0x85/0x2c0 [ 2750.219097] __mem_cgroup_charge+0x28/0x90 [ 2750.219635] __handle_mm_fault+0x102b/0x31c0 [ 2750.220188] ? lock_acquire.part.0+0xec/0x320 [ 2750.220776] ? lock_is_held_type+0x9f/0x120 [ 2750.221341] ? __pfx___handle_mm_fault+0x10/0x10 [ 2750.221991] handle_mm_fault+0x1b8/0x860 [ 2750.222531] __get_user_pages+0x4d6/0x1060 [ 2750.223110] ? __pfx___get_user_pages+0x10/0x10 [ 2750.223724] ? __pfx_mt_find+0x10/0x10 [ 2750.224266] populate_vma_page_range+0x2e7/0x420 [ 2750.224894] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2750.225572] ? __pfx_find_vma_intersection+0x10/0x10 [ 2750.226244] ? lock_acquire+0x32/0xc0 [ 2750.226743] ? __mm_populate+0x228/0x3a0 [ 2750.227301] __mm_populate+0x102/0x3a0 [ 2750.227832] ? __pfx___mm_populate+0x10/0x10 [ 2750.228419] ? up_write+0x196/0x510 [ 2750.228915] __do_sys_mlockall+0x414/0x4a0 [ 2750.229465] do_syscall_64+0x3f/0x90 [ 2750.229984] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2750.230677] RIP: 0033:0x7ff90dfe0b19 [ 2750.231163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2750.233431] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2750.234397] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2750.235289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2750.236178] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2750.237085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2750.237969] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2750.238885] [ 2750.240426] memory: usage 307200kB, limit 307200kB, failcnt 5084 [ 2750.241475] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2750.242279] Memory cgroup stats for /syz4: [ 2750.242518] anon 289349632 [ 2750.242518] file 20451328 [ 2750.242518] kernel 4771840 [ 2750.242518] kernel_stack 622592 [ 2750.242518] pagetables 3002368 [ 2750.242518] sec_pagetables 0 [ 2750.242518] percpu 1152 [ 2750.242518] sock 0 [ 2750.242518] vmalloc 0 [ 2750.242518] shmem 0 [ 2750.242518] file_mapped 20447232 [ 2750.242518] file_dirty 4096 [ 2750.242518] file_writeback 0 [ 2750.242518] swapcached 0 [ 2750.242518] inactive_anon 259604480 [ 2750.242518] active_anon 0 [ 2750.242518] inactive_file 4096 [ 2750.242518] active_file 0 [ 2750.242518] unevictable 50192384 [ 2750.242518] slab_reclaimable 101520 [ 2750.242518] slab_unreclaimable 664160 [ 2750.242518] slab 765680 [ 2750.242518] workingset_refault_anon 0 [ 2750.242518] workingset_refault_file 8354 [ 2750.242518] workingset_activate_anon 0 [ 2750.242518] workingset_activate_file 22 [ 2750.242518] workingset_restore_anon 0 [ 2750.242518] workingset_restore_file 0 [ 2750.242518] workingset_nodereclaim 0 [ 2750.242518] pgscan 11521 [ 2750.242518] pgsteal 8370 [ 2750.242518] pgscan_kswapd 3 [ 2750.242518] pgscan_direct 11518 [ 2750.242518] pgscan_khugepaged 0 [ 2750.242518] pgsteal_kswapd 0 [ 2750.242518] pgsteal_direct 8370 [ 2750.242518] pgsteal_khugepaged 0 [ 2750.242518] pgfault 627969 [ 2750.242518] pgmajfault 27 [ 2750.242518] pgrefill 1627 [ 2750.242518] pgactivate 63283 [ 2750.242518] pgdeactivate 1627 [ 2750.242518] pglazyfree 0 [ 2750.242518] pglazyfreed 0 [ 2750.258266] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11587,uid=0 [ 2750.260193] Memory cgroup out of memory: Killed process 11587 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:36:19 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x0, 0x0, 0x0, 0xffff, 0xffffffffffff4faa, 0x0, 0x0, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0) 16:36:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) 16:36:19 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:19 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:19 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:19 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0x0, 0x0], 0x2, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:36:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:36:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 16:36:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:36:19 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:19 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 16:36:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:36:19 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:19 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 2763.718727] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2763.720081] CPU: 1 PID: 11631 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2763.721078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2763.722093] Call Trace: [ 2763.722419] [ 2763.722713] dump_stack_lvl+0xc1/0xf0 [ 2763.723235] dump_header+0x10a/0xd50 [ 2763.723723] oom_kill_process+0x25d/0x600 [ 2763.724249] out_of_memory+0x35c/0x1660 [ 2763.724771] ? find_held_lock+0x2c/0x110 [ 2763.725321] ? __pfx_out_of_memory+0x10/0x10 [ 2763.725974] ? rcu_read_unlock+0x9/0x60 [ 2763.726475] ? lock_release+0x1e3/0x710 [ 2763.726968] ? lock_is_held_type+0x9f/0x120 [ 2763.727670] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2763.728291] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2763.728972] ? mem_cgroup_iter+0x291/0x710 [ 2763.729561] try_charge_memcg+0xec4/0x12e0 [ 2763.730122] ? lock_is_held_type+0x40/0x120 [ 2763.730686] ? __pfx_try_charge_memcg+0x10/0x10 [ 2763.731283] ? lock_release+0x1e3/0x710 [ 2763.731814] ? __pfx_lock_release+0x10/0x10 [ 2763.732369] ? trace_lock_acquire+0x170/0x1e0 [ 2763.732965] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2763.733585] ? lock_acquire+0x32/0xc0 [ 2763.734093] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2763.734727] charge_memcg+0x85/0x2c0 [ 2763.735235] __mem_cgroup_charge+0x28/0x90 [ 2763.735779] __handle_mm_fault+0x102b/0x31c0 [ 2763.736344] ? lock_acquire.part.0+0xec/0x320 [ 2763.736945] ? lock_is_held_type+0x9f/0x120 [ 2763.737522] ? __pfx___handle_mm_fault+0x10/0x10 [ 2763.738165] handle_mm_fault+0x1b8/0x860 [ 2763.738695] __get_user_pages+0x4d6/0x1060 [ 2763.739265] ? __pfx___get_user_pages+0x10/0x10 [ 2763.739871] ? __pfx_mt_find+0x10/0x10 [ 2763.740400] populate_vma_page_range+0x2e7/0x420 [ 2763.741023] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2763.741708] ? __pfx_find_vma_intersection+0x10/0x10 [ 2763.742367] ? lock_acquire+0x32/0xc0 [ 2763.742870] ? __mm_populate+0x228/0x3a0 [ 2763.743409] __mm_populate+0x102/0x3a0 [ 2763.743925] ? __pfx___mm_populate+0x10/0x10 [ 2763.744505] ? up_write+0x196/0x510 [ 2763.744985] __do_sys_mlockall+0x414/0x4a0 [ 2763.745543] do_syscall_64+0x3f/0x90 [ 2763.746040] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2763.746702] RIP: 0033:0x7fd09934cb19 [ 2763.747179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2763.749374] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2763.750315] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2763.751180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2763.752048] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2763.752933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2763.753815] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2763.754717] [ 2763.756364] memory: usage 307200kB, limit 307200kB, failcnt 11778 [ 2763.757440] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2763.758245] Memory cgroup stats for /syz6: [ 2763.758433] anon 291074048 [ 2763.758433] file 16646144 [ 2763.758433] kernel 6852608 [ 2763.758433] kernel_stack 950272 [ 2763.758433] pagetables 4198400 [ 2763.758433] sec_pagetables 0 [ 2763.758433] percpu 1792 [ 2763.758433] sock 0 [ 2763.758433] vmalloc 0 [ 2763.758433] shmem 0 [ 2763.758433] file_mapped 16646144 [ 2763.758433] file_dirty 0 [ 2763.758433] file_writeback 0 [ 2763.758433] swapcached 0 [ 2763.758433] inactive_anon 269533184 [ 2763.758433] active_anon 0 [ 2763.758433] inactive_file 0 [ 2763.758433] active_file 0 [ 2763.758433] unevictable 38187008 [ 2763.758433] slab_reclaimable 108576 [ 2763.758433] slab_unreclaimable 1008176 [ 2763.758433] slab 1116752 [ 2763.758433] workingset_refault_anon 0 [ 2763.758433] workingset_refault_file 5 [ 2763.758433] workingset_activate_anon 0 [ 2763.758433] workingset_activate_file 0 [ 2763.758433] workingset_restore_anon 0 [ 2763.758433] workingset_restore_file 0 [ 2763.758433] workingset_nodereclaim 0 [ 2763.758433] pgscan 2142 [ 2763.758433] pgsteal 1014 [ 2763.758433] pgscan_kswapd 3 [ 2763.758433] pgscan_direct 2139 [ 2763.758433] pgscan_khugepaged 0 [ 2763.758433] pgsteal_kswapd 0 [ 2763.758433] pgsteal_direct 1014 [ 2763.758433] pgsteal_khugepaged 0 [ 2763.758433] pgfault 1148546 [ 2763.758433] pgmajfault 0 [ 2763.758433] pgrefill 1170 [ 2763.758433] pgactivate 155237 [ 2763.758433] pgdeactivate 1145 [ 2763.758433] pglazyfree 0 [ 2763.758433] pglazyfreed 0 [ 2763.773610] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11625,uid=0 [ 2763.775507] Memory cgroup out of memory: Killed process 11625 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2763.890001] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2763.891234] CPU: 1 PID: 11630 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2763.892218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2763.893213] Call Trace: [ 2763.893542] [ 2763.893831] dump_stack_lvl+0xc1/0xf0 [ 2763.894329] dump_header+0x10a/0xd50 [ 2763.894811] oom_kill_process+0x25d/0x600 [ 2763.895334] out_of_memory+0x35c/0x1660 [ 2763.895840] ? find_held_lock+0x2c/0x110 [ 2763.896359] ? __pfx_out_of_memory+0x10/0x10 [ 2763.896909] ? rcu_read_unlock+0x9/0x60 [ 2763.897433] ? lock_release+0x1e3/0x710 [ 2763.897946] ? lock_is_held_type+0x9f/0x120 [ 2763.898503] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2763.899107] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2763.899773] ? mem_cgroup_iter+0x291/0x710 [ 2763.900326] try_charge_memcg+0xec4/0x12e0 [ 2763.900872] ? lock_is_held_type+0x40/0x120 [ 2763.901441] ? __pfx_try_charge_memcg+0x10/0x10 [ 2763.902039] ? lock_release+0x1e3/0x710 [ 2763.902558] ? __pfx_lock_release+0x10/0x10 [ 2763.903102] ? trace_lock_acquire+0x170/0x1e0 [ 2763.903677] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2763.904280] ? lock_acquire+0x32/0xc0 [ 2763.904778] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2763.905415] charge_memcg+0x85/0x2c0 [ 2763.905905] __mem_cgroup_charge+0x28/0x90 [ 2763.906429] __handle_mm_fault+0x102b/0x31c0 [ 2763.906974] ? lock_acquire.part.0+0xec/0x320 [ 2763.907544] ? lock_is_held_type+0x9f/0x120 [ 2763.908092] ? __pfx___handle_mm_fault+0x10/0x10 [ 2763.908720] handle_mm_fault+0x1b8/0x860 [ 2763.909239] __get_user_pages+0x4d6/0x1060 [ 2763.909799] ? __pfx___get_user_pages+0x10/0x10 [ 2763.910389] ? __pfx_mt_find+0x10/0x10 [ 2763.910903] populate_vma_page_range+0x2e7/0x420 [ 2763.911504] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2763.912157] ? __pfx_find_vma_intersection+0x10/0x10 [ 2763.912807] ? lock_acquire+0x32/0xc0 [ 2763.913313] ? __mm_populate+0x228/0x3a0 [ 2763.913849] __mm_populate+0x102/0x3a0 [ 2763.914353] ? __pfx___mm_populate+0x10/0x10 [ 2763.914922] ? up_write+0x196/0x510 [ 2763.915388] __do_sys_mlockall+0x414/0x4a0 [ 2763.915926] do_syscall_64+0x3f/0x90 [ 2763.916412] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2763.917065] RIP: 0033:0x7ff90dfe0b19 [ 2763.917537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2763.919684] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2763.920601] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2763.921476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2763.922317] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2763.923188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2763.924026] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2763.924883] [ 2763.925285] memory: usage 307200kB, limit 307200kB, failcnt 5119 [ 2763.926095] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2763.926865] Memory cgroup stats for /syz4: [ 2763.927075] anon 289349632 [ 2763.927075] file 20451328 [ 2763.927075] kernel 4771840 [ 2763.927075] kernel_stack 622592 [ 2763.927075] pagetables 3002368 [ 2763.927075] sec_pagetables 0 [ 2763.927075] percpu 1152 [ 2763.927075] sock 0 [ 2763.927075] vmalloc 0 [ 2763.927075] shmem 0 [ 2763.927075] file_mapped 20447232 [ 2763.927075] file_dirty 4096 [ 2763.927075] file_writeback 0 [ 2763.927075] swapcached 0 [ 2763.927075] inactive_anon 259604480 [ 2763.927075] active_anon 0 [ 2763.927075] inactive_file 4096 [ 2763.927075] active_file 0 [ 2763.927075] unevictable 50192384 [ 2763.927075] slab_reclaimable 101520 [ 2763.927075] slab_unreclaimable 664160 [ 2763.927075] slab 765680 [ 2763.927075] workingset_refault_anon 0 [ 2763.927075] workingset_refault_file 8354 [ 2763.927075] workingset_activate_anon 0 [ 2763.927075] workingset_activate_file 22 [ 2763.927075] workingset_restore_anon 0 [ 2763.927075] workingset_restore_file 0 [ 2763.927075] workingset_nodereclaim 0 [ 2763.927075] pgscan 11535 [ 2763.927075] pgsteal 8370 [ 2763.927075] pgscan_kswapd 3 [ 2763.927075] pgscan_direct 11532 [ 2763.927075] pgscan_khugepaged 0 [ 2763.927075] pgsteal_kswapd 0 [ 2763.927075] pgsteal_direct 8370 [ 2763.927075] pgsteal_khugepaged 0 [ 2763.927075] pgfault 635594 [ 2763.927075] pgmajfault 27 [ 2763.927075] pgrefill 1641 [ 2763.927075] pgactivate 64044 [ 2763.927075] pgdeactivate 1641 [ 2763.927075] pglazyfree 0 [ 2763.927075] pglazyfreed 0 [ 2763.941882] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11623,uid=0 [ 2763.944934] Memory cgroup out of memory: Killed process 11623 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:36:33 executing program 5: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:33 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 16:36:33 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:33 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:33 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:33 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:33 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:36:33 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:33 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:33 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 16:36:33 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:33 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:33 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0x0, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:33 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 16:36:33 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:33 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) [ 2777.253744] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2777.254474] CPU: 1 PID: 11663 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2777.255022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2777.255559] Call Trace: [ 2777.255740] [ 2777.255902] dump_stack_lvl+0xc1/0xf0 [ 2777.256180] dump_header+0x10a/0xd50 [ 2777.256447] oom_kill_process+0x25d/0x600 [ 2777.256738] out_of_memory+0x35c/0x1660 [ 2777.257017] ? find_held_lock+0x2c/0x110 [ 2777.257304] ? __pfx_out_of_memory+0x10/0x10 [ 2777.257606] ? rcu_read_unlock+0x9/0x60 [ 2777.257891] ? lock_release+0x1e3/0x710 [ 2777.258176] ? lock_is_held_type+0x9f/0x120 [ 2777.258488] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2777.258820] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2777.259192] ? mem_cgroup_iter+0x291/0x710 [ 2777.259495] try_charge_memcg+0xec4/0x12e0 [ 2777.259800] ? lock_is_held_type+0x40/0x120 [ 2777.260098] ? __pfx_try_charge_memcg+0x10/0x10 [ 2777.260432] ? lock_release+0x1e3/0x710 [ 2777.260715] ? __pfx_lock_release+0x10/0x10 [ 2777.261016] ? trace_lock_acquire+0x170/0x1e0 [ 2777.261346] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2777.261677] ? lock_acquire+0x32/0xc0 [ 2777.261948] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2777.262290] charge_memcg+0x85/0x2c0 [ 2777.262561] __mem_cgroup_charge+0x28/0x90 [ 2777.262850] __handle_mm_fault+0x102b/0x31c0 [ 2777.263154] ? lock_acquire.part.0+0xec/0x320 [ 2777.263470] ? lock_is_held_type+0x9f/0x120 [ 2777.263772] ? __pfx___handle_mm_fault+0x10/0x10 [ 2777.264136] handle_mm_fault+0x1b8/0x860 [ 2777.264426] __get_user_pages+0x4d6/0x1060 [ 2777.264741] ? __pfx___get_user_pages+0x10/0x10 [ 2777.265065] ? __pfx_mt_find+0x10/0x10 [ 2777.265371] populate_vma_page_range+0x2e7/0x420 [ 2777.265700] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2777.266073] ? __pfx_find_vma_intersection+0x10/0x10 [ 2777.266438] ? lock_acquire+0x32/0xc0 [ 2777.266717] ? __mm_populate+0x228/0x3a0 [ 2777.267018] __mm_populate+0x102/0x3a0 [ 2777.267309] ? __pfx___mm_populate+0x10/0x10 [ 2777.267634] ? up_write+0x196/0x510 [ 2777.267902] __do_sys_mlockall+0x414/0x4a0 [ 2777.268214] do_syscall_64+0x3f/0x90 [ 2777.268496] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2777.268870] RIP: 0033:0x7fd09934cb19 [ 2777.269137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2777.270386] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2777.270908] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2777.271401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2777.271893] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2777.272377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2777.272863] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2777.273383] [ 2777.274317] memory: usage 307200kB, limit 307200kB, failcnt 11845 [ 2777.274753] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2777.275369] Memory cgroup stats for /syz6: [ 2777.275503] anon 291074048 [ 2777.275503] file 16646144 [ 2777.275503] kernel 6852608 [ 2777.275503] kernel_stack 950272 [ 2777.275503] pagetables 4198400 [ 2777.275503] sec_pagetables 0 [ 2777.275503] percpu 1792 [ 2777.275503] sock 0 [ 2777.275503] vmalloc 0 [ 2777.275503] shmem 0 [ 2777.275503] file_mapped 16646144 [ 2777.275503] file_dirty 0 [ 2777.275503] file_writeback 0 [ 2777.275503] swapcached 0 [ 2777.275503] inactive_anon 269533184 [ 2777.275503] active_anon 0 [ 2777.275503] inactive_file 0 [ 2777.275503] active_file 0 [ 2777.275503] unevictable 38187008 [ 2777.275503] slab_reclaimable 108576 [ 2777.275503] slab_unreclaimable 1008176 [ 2777.275503] slab 1116752 [ 2777.275503] workingset_refault_anon 0 [ 2777.275503] workingset_refault_file 5 [ 2777.275503] workingset_activate_anon 0 [ 2777.275503] workingset_activate_file 0 [ 2777.275503] workingset_restore_anon 0 [ 2777.275503] workingset_restore_file 0 [ 2777.275503] workingset_nodereclaim 0 [ 2777.275503] pgscan 2142 [ 2777.275503] pgsteal 1014 [ 2777.275503] pgscan_kswapd 3 [ 2777.275503] pgscan_direct 2139 [ 2777.275503] pgscan_khugepaged 0 [ 2777.275503] pgsteal_kswapd 0 [ 2777.275503] pgsteal_direct 1014 [ 2777.275503] pgsteal_khugepaged 0 [ 2777.275503] pgfault 1154091 [ 2777.275503] pgmajfault 0 [ 2777.275503] pgrefill 1170 [ 2777.275503] pgactivate 155835 [ 2777.275503] pgdeactivate 1145 [ 2777.275503] pglazyfree 0 [ 2777.275503] pglazyfreed 0 [ 2777.284037] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11662,uid=0 [ 2777.285122] Memory cgroup out of memory: Killed process 11662 (syz-executor.6) total-vm:93412kB, anon-rss:21160kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2777.442427] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2777.443224] CPU: 1 PID: 11666 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2777.443812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2777.444351] Call Trace: [ 2777.444532] [ 2777.444694] dump_stack_lvl+0xc1/0xf0 [ 2777.444974] dump_header+0x10a/0xd50 [ 2777.445240] oom_kill_process+0x25d/0x600 [ 2777.445545] out_of_memory+0x35c/0x1660 [ 2777.445829] ? find_held_lock+0x2c/0x110 [ 2777.446119] ? __pfx_out_of_memory+0x10/0x10 [ 2777.446421] ? rcu_read_unlock+0x9/0x60 [ 2777.446705] ? lock_release+0x1e3/0x710 [ 2777.446990] ? lock_is_held_type+0x9f/0x120 [ 2777.447388] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2777.447746] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2777.448178] ? mem_cgroup_iter+0x291/0x710 [ 2777.448519] try_charge_memcg+0xec4/0x12e0 [ 2777.448846] ? lock_is_held_type+0x40/0x120 [ 2777.449175] ? __pfx_try_charge_memcg+0x10/0x10 [ 2777.449535] ? lock_release+0x1e3/0x710 [ 2777.449847] ? __pfx_lock_release+0x10/0x10 [ 2777.450206] ? trace_lock_acquire+0x170/0x1e0 [ 2777.450555] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2777.450918] ? lock_acquire+0x32/0xc0 [ 2777.451220] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2777.451607] charge_memcg+0x85/0x2c0 [ 2777.451894] __mem_cgroup_charge+0x28/0x90 [ 2777.452245] __handle_mm_fault+0x102b/0x31c0 [ 2777.452555] ? lock_acquire.part.0+0xec/0x320 [ 2777.452921] ? lock_is_held_type+0x9f/0x120 [ 2777.453249] ? __pfx___handle_mm_fault+0x10/0x10 [ 2777.453675] handle_mm_fault+0x1b8/0x860 [ 2777.453982] __get_user_pages+0x4d6/0x1060 [ 2777.454298] ? __pfx___get_user_pages+0x10/0x10 [ 2777.454700] ? __pfx_mt_find+0x10/0x10 [ 2777.454993] populate_vma_page_range+0x2e7/0x420 [ 2777.455403] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2777.455810] ? __pfx_find_vma_intersection+0x10/0x10 [ 2777.456220] ? lock_acquire+0x32/0xc0 [ 2777.456525] ? __mm_populate+0x228/0x3a0 [ 2777.456866] __mm_populate+0x102/0x3a0 [ 2777.457183] ? __pfx___mm_populate+0x10/0x10 [ 2777.457567] ? up_write+0x196/0x510 [ 2777.457855] __do_sys_mlockall+0x414/0x4a0 [ 2777.458199] do_syscall_64+0x3f/0x90 [ 2777.458478] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2777.458852] RIP: 0033:0x7ff90dfe0b19 [ 2777.459125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2777.460378] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2777.460946] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2777.461451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2777.461990] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2777.462528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2777.463076] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2777.463657] [ 2777.463873] memory: usage 307200kB, limit 307200kB, failcnt 5196 [ 2777.464355] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2777.464777] Memory cgroup stats for /syz4: [ 2777.464922] anon 289349632 [ 2777.464922] file 20451328 [ 2777.464922] kernel 4771840 [ 2777.464922] kernel_stack 622592 [ 2777.464922] pagetables 3002368 [ 2777.464922] sec_pagetables 0 [ 2777.464922] percpu 1152 [ 2777.464922] sock 0 [ 2777.464922] vmalloc 0 [ 2777.464922] shmem 0 [ 2777.464922] file_mapped 20447232 [ 2777.464922] file_dirty 0 [ 2777.464922] file_writeback 0 [ 2777.464922] swapcached 0 [ 2777.464922] inactive_anon 259604480 [ 2777.464922] active_anon 0 [ 2777.464922] inactive_file 4096 [ 2777.464922] active_file 0 [ 2777.464922] unevictable 50192384 [ 2777.464922] slab_reclaimable 101520 [ 2777.464922] slab_unreclaimable 664160 [ 2777.464922] slab 765680 [ 2777.464922] workingset_refault_anon 0 [ 2777.464922] workingset_refault_file 8354 [ 2777.464922] workingset_activate_anon 0 [ 2777.464922] workingset_activate_file 22 [ 2777.464922] workingset_restore_anon 0 [ 2777.464922] workingset_restore_file 0 [ 2777.464922] workingset_nodereclaim 0 [ 2777.464922] pgscan 11547 [ 2777.464922] pgsteal 8370 [ 2777.464922] pgscan_kswapd 4 [ 2777.464922] pgscan_direct 11543 [ 2777.464922] pgscan_khugepaged 0 [ 2777.464922] pgsteal_kswapd 0 [ 2777.464922] pgsteal_direct 8370 [ 2777.464922] pgsteal_khugepaged 0 [ 2777.464922] pgfault 643218 [ 2777.464922] pgmajfault 27 [ 2777.464922] pgrefill 1655 [ 2777.464922] pgactivate 64806 [ 2777.464922] pgdeactivate 1655 [ 2777.464922] pglazyfree 0 [ 2777.464922] pglazyfreed 0 [ 2777.474344] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11664,uid=0 [ 2777.475509] Memory cgroup out of memory: Killed process 11664 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:36:46 executing program 3: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:46 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x0, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:46 executing program 7: mlockall(0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:46 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:36:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) 16:36:46 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:46 executing program 5: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:46 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) 16:36:46 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x0, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) 16:36:46 executing program 7: mlockall(0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:46 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:46 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x0, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0x0, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa411, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:36:46 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:46 executing program 7: mlockall(0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) [ 2790.670655] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2790.671538] CPU: 0 PID: 11710 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2790.672223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2790.672901] Call Trace: [ 2790.673131] [ 2790.673330] dump_stack_lvl+0xc1/0xf0 [ 2790.673679] dump_header+0x10a/0xd50 [ 2790.674008] oom_kill_process+0x25d/0x600 [ 2790.674373] out_of_memory+0x35c/0x1660 [ 2790.674723] ? find_held_lock+0x2c/0x110 [ 2790.675076] ? __pfx_out_of_memory+0x10/0x10 [ 2790.675462] ? rcu_read_unlock+0x9/0x60 [ 2790.675810] ? lock_release+0x1e3/0x710 [ 2790.676157] ? lock_is_held_type+0x9f/0x120 [ 2790.676541] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2790.676866] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2790.677321] ? mem_cgroup_iter+0x291/0x710 [ 2790.677717] try_charge_memcg+0xec4/0x12e0 [ 2790.678084] ? lock_is_held_type+0x40/0x120 [ 2790.678458] ? __pfx_try_charge_memcg+0x10/0x10 [ 2790.678869] ? lock_release+0x1e3/0x710 [ 2790.679225] ? __pfx_lock_release+0x10/0x10 [ 2790.679603] ? trace_lock_acquire+0x170/0x1e0 [ 2790.679999] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2790.680415] ? lock_acquire+0x32/0xc0 [ 2790.680756] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2790.681077] charge_memcg+0x85/0x2c0 [ 2790.681405] __mem_cgroup_charge+0x28/0x90 [ 2790.681786] __handle_mm_fault+0x102b/0x31c0 [ 2790.682170] ? lock_acquire.part.0+0xec/0x320 [ 2790.682563] ? lock_is_held_type+0x9f/0x120 [ 2790.682940] ? __pfx___handle_mm_fault+0x10/0x10 [ 2790.683358] handle_mm_fault+0x1b8/0x860 [ 2790.683714] __get_user_pages+0x4d6/0x1060 [ 2790.684093] ? __pfx___get_user_pages+0x10/0x10 [ 2790.684495] ? __pfx_mt_find+0x10/0x10 [ 2790.684769] populate_vma_page_range+0x2e7/0x420 [ 2790.685182] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2790.685643] ? __pfx_find_vma_intersection+0x10/0x10 [ 2790.686088] ? lock_acquire+0x32/0xc0 [ 2790.686431] ? __mm_populate+0x228/0x3a0 [ 2790.686793] __mm_populate+0x102/0x3a0 [ 2790.687134] ? __pfx___mm_populate+0x10/0x10 [ 2790.687516] ? up_write+0x196/0x510 [ 2790.687839] __do_sys_mlockall+0x414/0x4a0 [ 2790.688212] do_syscall_64+0x3f/0x90 [ 2790.688550] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2790.688894] RIP: 0033:0x7fd09934cb19 [ 2790.689202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2790.690298] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2790.690922] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2790.691497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2790.692086] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2790.692676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2790.693273] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2790.693889] [ 2790.694166] memory: usage 307200kB, limit 307200kB, failcnt 11912 [ 2790.694682] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2790.695207] Memory cgroup stats for /syz6: [ 2790.695336] anon 291074048 [ 2790.695336] file 16646144 [ 2790.695336] kernel 6852608 [ 2790.695336] kernel_stack 950272 [ 2790.695336] pagetables 4198400 [ 2790.695336] sec_pagetables 0 [ 2790.695336] percpu 1792 [ 2790.695336] sock 0 [ 2790.695336] vmalloc 0 [ 2790.695336] shmem 0 [ 2790.695336] file_mapped 16646144 [ 2790.695336] file_dirty 0 [ 2790.695336] file_writeback 0 [ 2790.695336] swapcached 0 [ 2790.695336] inactive_anon 269533184 [ 2790.695336] active_anon 0 [ 2790.695336] inactive_file 0 [ 2790.695336] active_file 0 [ 2790.695336] unevictable 38187008 [ 2790.695336] slab_reclaimable 108576 [ 2790.695336] slab_unreclaimable 1008176 [ 2790.695336] slab 1116752 [ 2790.695336] workingset_refault_anon 0 [ 2790.695336] workingset_refault_file 5 [ 2790.695336] workingset_activate_anon 0 [ 2790.695336] workingset_activate_file 0 [ 2790.695336] workingset_restore_anon 0 [ 2790.695336] workingset_restore_file 0 [ 2790.695336] workingset_nodereclaim 0 [ 2790.695336] pgscan 2148 [ 2790.695336] pgsteal 1014 [ 2790.695336] pgscan_kswapd 9 [ 2790.695336] pgscan_direct 2139 [ 2790.695336] pgscan_khugepaged 0 [ 2790.695336] pgsteal_kswapd 0 [ 2790.695336] pgsteal_direct 1014 [ 2790.695336] pgsteal_khugepaged 0 [ 2790.695336] pgfault 1159636 [ 2790.695336] pgmajfault 0 [ 2790.695336] pgrefill 1170 [ 2790.695336] pgactivate 156506 [ 2790.695336] pgdeactivate 1145 [ 2790.695336] pglazyfree 0 [ 2790.695336] pglazyfreed 0 [ 2790.704426] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11707,uid=0 [ 2790.705655] Memory cgroup out of memory: Killed process 11707 (syz-executor.6) total-vm:93412kB, anon-rss:21160kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2790.826994] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2790.827691] CPU: 0 PID: 11708 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2790.828241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2790.828799] Call Trace: [ 2790.828979] [ 2790.829137] dump_stack_lvl+0xc1/0xf0 [ 2790.829417] dump_header+0x10a/0xd50 [ 2790.829698] oom_kill_process+0x25d/0x600 [ 2790.829982] out_of_memory+0x35c/0x1660 [ 2790.830263] ? find_held_lock+0x2c/0x110 [ 2790.830549] ? __pfx_out_of_memory+0x10/0x10 [ 2790.830852] ? rcu_read_unlock+0x9/0x60 [ 2790.831135] ? lock_release+0x1e3/0x710 [ 2790.831419] ? lock_is_held_type+0x9f/0x120 [ 2790.831725] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2790.832031] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2790.832395] ? mem_cgroup_iter+0x291/0x710 [ 2790.832678] try_charge_memcg+0xec4/0x12e0 [ 2790.832979] ? lock_is_held_type+0x40/0x120 [ 2790.833261] ? __pfx_try_charge_memcg+0x10/0x10 [ 2790.833602] ? lock_release+0x1e3/0x710 [ 2790.833867] ? __pfx_lock_release+0x10/0x10 [ 2790.834170] ? trace_lock_acquire+0x170/0x1e0 [ 2790.834467] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2790.834804] ? lock_acquire+0x32/0xc0 [ 2790.835056] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2790.835395] charge_memcg+0x85/0x2c0 [ 2790.835652] __mem_cgroup_charge+0x28/0x90 [ 2790.835940] __handle_mm_fault+0x102b/0x31c0 [ 2790.836222] ? lock_acquire.part.0+0xec/0x320 [ 2790.836541] ? lock_is_held_type+0x9f/0x120 [ 2790.836820] ? __pfx___handle_mm_fault+0x10/0x10 [ 2790.837161] handle_mm_fault+0x1b8/0x860 [ 2790.837426] __get_user_pages+0x4d6/0x1060 [ 2790.837740] ? __pfx___get_user_pages+0x10/0x10 [ 2790.838055] ? __pfx_mt_find+0x10/0x10 [ 2790.838321] populate_vma_page_range+0x2e7/0x420 [ 2790.838626] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2790.838954] ? __pfx_find_vma_intersection+0x10/0x10 [ 2790.839276] ? lock_acquire+0x32/0xc0 [ 2790.839526] ? __mm_populate+0x228/0x3a0 [ 2790.839816] __mm_populate+0x102/0x3a0 [ 2790.840073] ? __pfx___mm_populate+0x10/0x10 [ 2790.840382] ? up_write+0x196/0x510 [ 2790.840627] __do_sys_mlockall+0x414/0x4a0 [ 2790.840928] do_syscall_64+0x3f/0x90 [ 2790.841181] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2790.841549] RIP: 0033:0x7ff90dfe0b19 [ 2790.841787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2790.842849] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2790.843308] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2790.843737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2790.844213] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2790.844673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2790.845148] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2790.845638] [ 2790.845927] memory: usage 307200kB, limit 307200kB, failcnt 5248 [ 2790.846498] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2790.846940] Memory cgroup stats for /syz4: [ 2790.847066] anon 289349632 [ 2790.847066] file 20451328 [ 2790.847066] kernel 4771840 [ 2790.847066] kernel_stack 622592 [ 2790.847066] pagetables 3002368 [ 2790.847066] sec_pagetables 0 [ 2790.847066] percpu 1152 [ 2790.847066] sock 0 [ 2790.847066] vmalloc 0 [ 2790.847066] shmem 0 [ 2790.847066] file_mapped 20447232 [ 2790.847066] file_dirty 0 [ 2790.847066] file_writeback 0 [ 2790.847066] swapcached 0 [ 2790.847066] inactive_anon 259604480 [ 2790.847066] active_anon 0 [ 2790.847066] inactive_file 0 [ 2790.847066] active_file 4096 [ 2790.847066] unevictable 50192384 [ 2790.847066] slab_reclaimable 101520 [ 2790.847066] slab_unreclaimable 664160 [ 2790.847066] slab 765680 [ 2790.847066] workingset_refault_anon 0 [ 2790.847066] workingset_refault_file 8354 [ 2790.847066] workingset_activate_anon 0 [ 2790.847066] workingset_activate_file 22 [ 2790.847066] workingset_restore_anon 0 [ 2790.847066] workingset_restore_file 0 [ 2790.847066] workingset_nodereclaim 0 [ 2790.847066] pgscan 11567 [ 2790.847066] pgsteal 8370 [ 2790.847066] pgscan_kswapd 13 [ 2790.847066] pgscan_direct 11554 [ 2790.847066] pgscan_khugepaged 0 [ 2790.847066] pgsteal_kswapd 0 [ 2790.847066] pgsteal_direct 8370 [ 2790.847066] pgsteal_khugepaged 0 [ 2790.847066] pgfault 650842 [ 2790.847066] pgmajfault 27 [ 2790.847066] pgrefill 1667 [ 2790.847066] pgactivate 65695 [ 2790.847066] pgdeactivate 1667 [ 2790.847066] pglazyfree 0 [ 2790.847066] pglazyfreed 0 [ 2790.855081] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11706,uid=0 [ 2790.856276] Memory cgroup out of memory: Killed process 11706 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:36:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xffffffffffff9a3d, 0x7, 0x0, 0x0, 0x4e5, 0x7, 0x0, 0x0, 0x3, 0x0, 0xfff, 0x90, 0x6, 0x0, 0x6, 0x4000000000000000, 0x7, 0x0, 0x0, 0x3, 0x401, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x3, 0x94, 0x5, 0x0, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x0, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0x0, 0x0, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x0, 0x5, 0x100000000, 0x0, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, 0xffffffffffffffff, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:36:59 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x0, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:59 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) 16:36:59 executing program 1: mlockall(0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:59 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:59 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:36:59 executing program 5: mlockall(0x0) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:36:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:59 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x0, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x2, 0x0, 0x7, 0x8, 0x0, 0x0, 0xffff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f, 0x3, 0x401, 0x0, 0x5881, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1cb, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 16:36:59 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:59 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x0, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:36:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:59 executing program 1: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) fork() clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) 16:36:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:36:59 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) fork() clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) 16:36:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2803.151746] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2803.152448] CPU: 1 PID: 11745 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2803.152988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2803.153528] Call Trace: [ 2803.153716] [ 2803.153891] dump_stack_lvl+0xc1/0xf0 [ 2803.154173] dump_header+0x10a/0xd50 [ 2803.154442] oom_kill_process+0x25d/0x600 [ 2803.154732] out_of_memory+0x35c/0x1660 [ 2803.155016] ? find_held_lock+0x2c/0x110 [ 2803.155306] ? __pfx_out_of_memory+0x10/0x10 [ 2803.155609] ? rcu_read_unlock+0x9/0x60 [ 2803.155900] ? lock_release+0x1e3/0x710 [ 2803.156181] ? lock_is_held_type+0x9f/0x120 [ 2803.156488] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2803.156825] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2803.157191] ? mem_cgroup_iter+0x291/0x710 [ 2803.157495] try_charge_memcg+0xec4/0x12e0 [ 2803.157804] ? lock_is_held_type+0x40/0x120 [ 2803.158110] ? __pfx_try_charge_memcg+0x10/0x10 [ 2803.158433] ? lock_release+0x1e3/0x710 [ 2803.158718] ? __pfx_lock_release+0x10/0x10 [ 2803.159024] ? trace_lock_acquire+0x170/0x1e0 [ 2803.159343] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2803.159684] ? lock_acquire+0x32/0xc0 [ 2803.159955] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2803.160294] charge_memcg+0x85/0x2c0 [ 2803.160565] __mem_cgroup_charge+0x28/0x90 [ 2803.160860] __handle_mm_fault+0x102b/0x31c0 [ 2803.161163] ? lock_acquire.part.0+0xec/0x320 [ 2803.161485] ? lock_is_held_type+0x9f/0x120 [ 2803.161803] ? __pfx___handle_mm_fault+0x10/0x10 [ 2803.162144] handle_mm_fault+0x1b8/0x860 [ 2803.162428] __get_user_pages+0x4d6/0x1060 [ 2803.162739] ? __pfx___get_user_pages+0x10/0x10 [ 2803.163067] ? __pfx_mt_find+0x10/0x10 [ 2803.163346] populate_vma_page_range+0x2e7/0x420 [ 2803.163679] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2803.164037] ? __pfx_find_vma_intersection+0x10/0x10 [ 2803.164392] ? lock_acquire+0x32/0xc0 [ 2803.164662] ? __mm_populate+0x228/0x3a0 [ 2803.164952] __mm_populate+0x102/0x3a0 [ 2803.165228] ? __pfx___mm_populate+0x10/0x10 [ 2803.165535] ? up_write+0x196/0x510 [ 2803.165803] __do_sys_mlockall+0x414/0x4a0 [ 2803.166099] do_syscall_64+0x3f/0x90 [ 2803.166368] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2803.166726] RIP: 0033:0x7fd09934cb19 [ 2803.166982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2803.168133] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2803.168630] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2803.169093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2803.169558] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2803.170032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2803.170496] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2803.170979] [ 2803.171998] memory: usage 307200kB, limit 307200kB, failcnt 11957 [ 2803.172413] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2803.173030] Memory cgroup stats for /syz6: [ 2803.173176] anon 291074048 [ 2803.173176] file 16646144 [ 2803.173176] kernel 6852608 [ 2803.173176] kernel_stack 950272 [ 2803.173176] pagetables 4198400 [ 2803.173176] sec_pagetables 0 [ 2803.173176] percpu 1792 [ 2803.173176] sock 0 [ 2803.173176] vmalloc 0 [ 2803.173176] shmem 0 [ 2803.173176] file_mapped 16646144 [ 2803.173176] file_dirty 0 [ 2803.173176] file_writeback 0 [ 2803.173176] swapcached 0 [ 2803.173176] inactive_anon 269533184 [ 2803.173176] active_anon 0 [ 2803.173176] inactive_file 0 [ 2803.173176] active_file 0 [ 2803.173176] unevictable 38187008 [ 2803.173176] slab_reclaimable 108576 [ 2803.173176] slab_unreclaimable 1008176 [ 2803.173176] slab 1116752 [ 2803.173176] workingset_refault_anon 0 [ 2803.173176] workingset_refault_file 5 [ 2803.173176] workingset_activate_anon 0 [ 2803.173176] workingset_activate_file 0 [ 2803.173176] workingset_restore_anon 0 [ 2803.173176] workingset_restore_file 0 [ 2803.173176] workingset_nodereclaim 0 [ 2803.173176] pgscan 2148 [ 2803.173176] pgsteal 1014 [ 2803.173176] pgscan_kswapd 9 [ 2803.173176] pgscan_direct 2139 [ 2803.173176] pgscan_khugepaged 0 [ 2803.173176] pgsteal_kswapd 0 [ 2803.173176] pgsteal_direct 1014 [ 2803.173176] pgsteal_khugepaged 0 [ 2803.173176] pgfault 1165181 [ 2803.173176] pgmajfault 0 [ 2803.173176] pgrefill 1170 [ 2803.173176] pgactivate 157078 [ 2803.173176] pgdeactivate 1145 [ 2803.173176] pglazyfree 0 [ 2803.173176] pglazyfreed 0 [ 2803.181555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11744,uid=0 [ 2803.182593] Memory cgroup out of memory: Killed process 11744 (syz-executor.6) total-vm:93412kB, anon-rss:21288kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 2803.313500] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2803.314248] CPU: 1 PID: 11750 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2803.314816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2803.315386] Call Trace: [ 2803.315575] [ 2803.315748] dump_stack_lvl+0xc1/0xf0 [ 2803.316042] dump_header+0x10a/0xd50 [ 2803.316323] oom_kill_process+0x25d/0x600 [ 2803.316620] out_of_memory+0x35c/0x1660 [ 2803.316923] ? find_held_lock+0x2c/0x110 [ 2803.317227] ? __pfx_out_of_memory+0x10/0x10 [ 2803.317547] ? rcu_read_unlock+0x9/0x60 [ 2803.317851] ? lock_release+0x1e3/0x710 [ 2803.318146] ? lock_is_held_type+0x9f/0x120 [ 2803.318469] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2803.318821] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2803.319199] ? mem_cgroup_iter+0x291/0x710 [ 2803.319502] try_charge_memcg+0xec4/0x12e0 [ 2803.319805] ? lock_is_held_type+0x40/0x120 [ 2803.320112] ? __pfx_try_charge_memcg+0x10/0x10 [ 2803.320436] ? lock_release+0x1e3/0x710 [ 2803.320722] ? __pfx_lock_release+0x10/0x10 [ 2803.321031] ? trace_lock_acquire+0x170/0x1e0 [ 2803.321350] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2803.321706] ? lock_acquire+0x32/0xc0 [ 2803.321985] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2803.322324] charge_memcg+0x85/0x2c0 [ 2803.322590] __mem_cgroup_charge+0x28/0x90 [ 2803.322877] __handle_mm_fault+0x102b/0x31c0 [ 2803.323178] ? lock_acquire.part.0+0xec/0x320 [ 2803.323491] ? lock_is_held_type+0x9f/0x120 [ 2803.323791] ? __pfx___handle_mm_fault+0x10/0x10 [ 2803.324137] handle_mm_fault+0x1b8/0x860 [ 2803.324433] __get_user_pages+0x4d6/0x1060 [ 2803.324752] ? __pfx___get_user_pages+0x10/0x10 [ 2803.325092] ? __pfx_mt_find+0x10/0x10 [ 2803.325384] populate_vma_page_range+0x2e7/0x420 [ 2803.325737] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2803.326111] ? __pfx_find_vma_intersection+0x10/0x10 [ 2803.326483] ? lock_acquire+0x32/0xc0 [ 2803.326764] ? __mm_populate+0x228/0x3a0 [ 2803.327067] __mm_populate+0x102/0x3a0 [ 2803.327360] ? __pfx___mm_populate+0x10/0x10 [ 2803.327690] ? up_write+0x196/0x510 [ 2803.327959] __do_sys_mlockall+0x414/0x4a0 [ 2803.328267] do_syscall_64+0x3f/0x90 [ 2803.328546] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2803.328917] RIP: 0033:0x7ff90dfe0b19 [ 2803.329183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2803.330418] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2803.330944] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2803.331436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2803.331926] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2803.332413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2803.332908] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2803.333419] [ 2803.333653] memory: usage 307200kB, limit 307200kB, failcnt 5277 [ 2803.334101] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2803.334522] Memory cgroup stats for /syz4: [ 2803.334656] anon 289349632 [ 2803.334656] file 20451328 [ 2803.334656] kernel 4771840 [ 2803.334656] kernel_stack 622592 [ 2803.334656] pagetables 3002368 [ 2803.334656] sec_pagetables 0 [ 2803.334656] percpu 1152 [ 2803.334656] sock 0 [ 2803.334656] vmalloc 0 [ 2803.334656] shmem 0 [ 2803.334656] file_mapped 20447232 [ 2803.334656] file_dirty 0 [ 2803.334656] file_writeback 0 [ 2803.334656] swapcached 0 [ 2803.334656] inactive_anon 259604480 [ 2803.334656] active_anon 0 [ 2803.334656] inactive_file 4096 [ 2803.334656] active_file 0 [ 2803.334656] unevictable 50192384 [ 2803.334656] slab_reclaimable 101520 [ 2803.334656] slab_unreclaimable 664160 [ 2803.334656] slab 765680 [ 2803.334656] workingset_refault_anon 0 [ 2803.334656] workingset_refault_file 8354 [ 2803.334656] workingset_activate_anon 0 [ 2803.334656] workingset_activate_file 22 [ 2803.334656] workingset_restore_anon 0 [ 2803.334656] workingset_restore_file 0 [ 2803.334656] workingset_nodereclaim 0 [ 2803.334656] pgscan 11581 [ 2803.334656] pgsteal 8370 [ 2803.334656] pgscan_kswapd 13 [ 2803.334656] pgscan_direct 11568 [ 2803.334656] pgscan_khugepaged 0 [ 2803.334656] pgsteal_kswapd 0 [ 2803.334656] pgsteal_direct 8370 [ 2803.334656] pgsteal_khugepaged 0 [ 2803.334656] pgfault 658467 [ 2803.334656] pgmajfault 27 [ 2803.334656] pgrefill 1683 [ 2803.334656] pgactivate 66425 [ 2803.334656] pgdeactivate 1683 [ 2803.334656] pglazyfree 0 [ 2803.334656] pglazyfreed 0 [ 2803.343243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=11741,uid=0 [ 2803.344307] Memory cgroup out of memory: Killed process 11741 (syz-executor.4) total-vm:93412kB, anon-rss:29224kB, file-rss:56448kB, shmem-rss:0kB, UID:0 pgtables:220kB oom_score_adj:1000 16:37:13 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) fork() clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) 16:37:13 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:37:13 executing program 3: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x0, 0x0, [0x0, 0x9], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x5e, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x3f, 0x5d59, 0x7, 0xffffffffffff9a3d, 0x7, 0x6, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x401, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x3c5a, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1}) 16:37:13 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) fork() clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) fork() getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940), {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(0x0, 0x0) 16:37:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:37:13 executing program 4: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) 16:37:13 executing program 1: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) fork() clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) 16:37:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x0, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:37:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x0, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:37:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:37:13 executing program 3: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) fork() 16:37:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x0, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:37:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x0, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:37:13 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2817.976757] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2817.978157] CPU: 0 PID: 11791 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2817.979217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2817.980252] Call Trace: [ 2817.980599] [ 2817.980906] dump_stack_lvl+0xc1/0xf0 [ 2817.981443] dump_header+0x10a/0xd50 [ 2817.981967] oom_kill_process+0x25d/0x600 [ 2817.982523] out_of_memory+0x35c/0x1660 [ 2817.983066] ? find_held_lock+0x2c/0x110 [ 2817.983618] ? __pfx_out_of_memory+0x10/0x10 [ 2817.984204] ? rcu_read_unlock+0x9/0x60 [ 2817.984754] ? lock_release+0x1e3/0x710 [ 2817.985304] ? lock_is_held_type+0x9f/0x120 [ 2817.985906] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2817.986558] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2817.987266] ? mem_cgroup_iter+0x291/0x710 [ 2817.987858] try_charge_memcg+0xec4/0x12e0 [ 2817.988442] ? lock_is_held_type+0x40/0x120 [ 2817.989029] ? __pfx_try_charge_memcg+0x10/0x10 [ 2817.989665] ? lock_release+0x1e3/0x710 [ 2817.990242] ? __pfx_lock_release+0x10/0x10 [ 2817.990836] ? trace_lock_acquire+0x170/0x1e0 [ 2817.991456] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2817.992097] ? lock_acquire+0x32/0xc0 [ 2817.992622] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2817.993277] charge_memcg+0x85/0x2c0 [ 2817.993801] __mem_cgroup_charge+0x28/0x90 [ 2817.994392] __handle_mm_fault+0x102b/0x31c0 [ 2817.994977] ? lock_acquire.part.0+0xec/0x320 [ 2817.995593] ? lock_is_held_type+0x9f/0x120 [ 2817.996175] ? __pfx___handle_mm_fault+0x10/0x10 [ 2817.996842] handle_mm_fault+0x1b8/0x860 [ 2817.997391] __get_user_pages+0x4d6/0x1060 [ 2817.998003] ? __pfx___get_user_pages+0x10/0x10 [ 2817.998633] ? __pfx_mt_find+0x10/0x10 [ 2817.999178] populate_vma_page_range+0x2e7/0x420 [ 2817.999818] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2818.000510] ? __pfx_find_vma_intersection+0x10/0x10 [ 2818.001189] ? __mm_populate+0x13a/0x3a0 [ 2818.001750] __mm_populate+0x102/0x3a0 [ 2818.002298] ? __pfx___mm_populate+0x10/0x10 [ 2818.002904] ? up_write+0x196/0x510 [ 2818.003411] __do_sys_mlockall+0x414/0x4a0 [ 2818.003985] do_syscall_64+0x3f/0x90 [ 2818.004505] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2818.005195] RIP: 0033:0x7fd09934cb19 [ 2818.005695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2818.007958] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2818.008925] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2818.009856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2818.010767] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2818.011770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2818.012671] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2818.013615] [ 2818.015266] memory: usage 307200kB, limit 307200kB, failcnt 11990 [ 2818.016318] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2818.017141] Memory cgroup stats for /syz6: [ 2818.017343] anon 291074048 [ 2818.017343] file 16646144 [ 2818.017343] kernel 6852608 [ 2818.017343] kernel_stack 950272 [ 2818.017343] pagetables 4198400 [ 2818.017343] sec_pagetables 0 [ 2818.017343] percpu 1792 [ 2818.017343] sock 0 [ 2818.017343] vmalloc 0 [ 2818.017343] shmem 0 [ 2818.017343] file_mapped 16646144 [ 2818.017343] file_dirty 0 [ 2818.017343] file_writeback 0 [ 2818.017343] swapcached 0 [ 2818.017343] inactive_anon 269533184 [ 2818.017343] active_anon 0 [ 2818.017343] inactive_file 0 [ 2818.017343] active_file 0 [ 2818.017343] unevictable 38187008 [ 2818.017343] slab_reclaimable 108576 [ 2818.017343] slab_unreclaimable 1008176 [ 2818.017343] slab 1116752 [ 2818.017343] workingset_refault_anon 0 [ 2818.017343] workingset_refault_file 5 [ 2818.017343] workingset_activate_anon 0 [ 2818.017343] workingset_activate_file 0 [ 2818.017343] workingset_restore_anon 0 [ 2818.017343] workingset_restore_file 0 [ 2818.017343] workingset_nodereclaim 0 [ 2818.017343] pgscan 2148 [ 2818.017343] pgsteal 1014 [ 2818.017343] pgscan_kswapd 9 [ 2818.017343] pgscan_direct 2139 [ 2818.017343] pgscan_khugepaged 0 [ 2818.017343] pgsteal_kswapd 0 [ 2818.017343] pgsteal_direct 1014 [ 2818.017343] pgsteal_khugepaged 0 [ 2818.017343] pgfault 1170726 [ 2818.017343] pgmajfault 0 [ 2818.017343] pgrefill 1170 [ 2818.017343] pgactivate 157673 [ 2818.017343] pgdeactivate 1145 [ 2818.017343] pglazyfree 0 [ 2818.017343] pglazyfreed 0 [ 2818.033364] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=11786,uid=0 [ 2818.035360] Memory cgroup out of memory: Killed process 11786 (syz-executor.6) total-vm:93412kB, anon-rss:21160kB, file-rss:51968kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 16:37:15 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:37:15 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:37:15 executing program 1: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) fork() clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) 16:37:15 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) fork() clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) 16:37:15 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) fork() clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) fork() getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940), {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(0x0, 0x0) 16:37:15 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2820.872896] cgroup: fork rejected by pids controller in /syz6 16:37:30 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:37:45 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:37:45 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:37:45 executing program 3: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:37:45 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:37:45 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) fork() clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) fork() getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940), {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(0x0, 0x0) 16:37:45 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) [ 2850.801118] syz-executor.6 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 2850.802232] CPU: 1 PID: 11958 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2850.802776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2850.803324] Call Trace: [ 2850.803504] [ 2850.803665] dump_stack_lvl+0xc1/0xf0 [ 2850.803949] dump_header+0x10a/0xd50 [ 2850.804215] oom_kill_process+0x25d/0x600 [ 2850.804498] out_of_memory+0x35c/0x1660 [ 2850.804777] ? find_held_lock+0x2c/0x110 [ 2850.805065] ? __pfx_out_of_memory+0x10/0x10 [ 2850.805363] ? rcu_read_unlock+0x9/0x60 [ 2850.805642] ? lock_release+0x1e3/0x710 [ 2850.806014] ? lock_is_held_type+0x9f/0x120 [ 2850.806333] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2850.806792] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2850.807158] ? mem_cgroup_iter+0x291/0x710 [ 2850.807567] try_charge_memcg+0xec4/0x12e0 [ 2850.807963] ? __pfx_try_charge_memcg+0x10/0x10 [ 2850.808293] ? __pfx_lock_release+0x10/0x10 [ 2850.808591] ? trace_lock_acquire+0x170/0x1e0 [ 2850.808906] ? get_mem_cgroup_from_objcg+0x15d/0x290 [ 2850.809257] ? lock_acquire+0x32/0xc0 [ 2850.809528] ? get_mem_cgroup_from_objcg+0x15d/0x290 [ 2850.809882] __memcg_kmem_charge_page+0x167/0x3d0 [ 2850.810214] __alloc_pages+0x1f3/0x510 [ 2850.810491] ? __pfx___alloc_pages+0x10/0x10 [ 2850.810826] ? __pfx_percpu_ref_put_many.constprop.0+0x10/0x10 [ 2850.811337] ? rcu_read_lock_sched_held+0x42/0x80 [ 2850.811739] ? trace_kmem_cache_alloc+0xa1/0xe0 [ 2850.812064] ? kmem_cache_alloc_node+0x1d9/0x330 [ 2850.812391] copy_process+0x440/0x7390 [ 2850.812664] ? __pfx___schedule+0x10/0x10 [ 2850.812953] ? lock_release+0x1e3/0x710 [ 2850.813244] ? __pfx_copy_process+0x10/0x10 [ 2850.813543] ? do_nanosleep+0x37c/0x510 [ 2850.813842] ? lock_is_held_type+0x9f/0x120 [ 2850.814150] kernel_clone+0xeb/0x8c0 [ 2850.814439] ? __hrtimer_init+0x13b/0x260 [ 2850.814727] ? __pfx_kernel_clone+0x10/0x10 [ 2850.815036] ? hrtimer_nanosleep+0x1bb/0x420 [ 2850.815340] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 2850.815687] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 2850.816000] __do_sys_clone+0xba/0x100 [ 2850.816289] ? __pfx___do_sys_clone+0x10/0x10 [ 2850.816617] do_syscall_64+0x3f/0x90 [ 2850.816903] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2850.817259] RIP: 0033:0x7fd09934df41 [ 2850.817530] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 2850.818701] RSP: 002b:00007fff0b4f3e38 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2850.819251] RAX: ffffffffffffffda RBX: 00007fd096880700 RCX: 00007fd09934df41 [ 2850.819821] RDX: 00007fd0968809d0 RSI: 00007fd0968802f0 RDI: 00000000003d0f00 [ 2850.820448] RBP: 00007fff0b4f4070 R08: 00007fd096880700 R09: 00007fd096880700 [ 2850.820935] R10: 00007fd0968809d0 R11: 0000000000000206 R12: 00007fff0b4f3eee [ 2850.821436] R13: 00007fff0b4f3eef R14: 00007fd096880300 R15: 0000555555aade70 [ 2850.822068] [ 2850.822377] memory: usage 307200kB, limit 307200kB, failcnt 12356 [ 2850.822957] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2850.823385] Memory cgroup stats for /syz6: [ 2850.823532] anon 303312896 [ 2850.823532] file 4149248 [ 2850.823532] kernel 7110656 [ 2850.823532] kernel_stack 1015808 [ 2850.823532] pagetables 4308992 [ 2850.823532] sec_pagetables 0 [ 2850.823532] percpu 1856 [ 2850.823532] sock 0 [ 2850.823532] vmalloc 0 [ 2850.823532] shmem 0 [ 2850.823532] file_mapped 4149248 [ 2850.823532] file_dirty 20480 [ 2850.823532] file_writeback 0 [ 2850.823532] swapcached 0 [ 2850.823532] inactive_anon 286416896 [ 2850.823532] active_anon 0 [ 2850.823532] inactive_file 0 [ 2850.823532] active_file 0 [ 2850.823532] unevictable 21045248 [ 2850.823532] slab_reclaimable 115504 [ 2850.823532] slab_unreclaimable 1061184 [ 2850.823532] slab 1176688 [ 2850.823532] workingset_refault_anon 0 [ 2850.823532] workingset_refault_file 2084 [ 2850.823532] workingset_activate_anon 0 [ 2850.823532] workingset_activate_file 63 [ 2850.823532] workingset_restore_anon 0 [ 2850.823532] workingset_restore_file 24 [ 2850.823532] workingset_nodereclaim 0 [ 2850.823532] pgscan 8679 [ 2850.823532] pgsteal 6144 [ 2850.823532] pgscan_kswapd 321 [ 2850.823532] pgscan_direct 8358 [ 2850.823532] pgscan_khugepaged 0 [ 2850.823532] pgsteal_kswapd 217 [ 2850.823532] pgsteal_direct 5927 [ 2850.823532] pgsteal_khugepaged 0 [ 2850.823532] pgfault 1179395 [ 2850.823532] pgmajfault 22 [ 2850.823532] pgrefill 1187 [ 2850.823532] pgactivate 157820 [ 2850.823532] pgdeactivate 1162 [ 2850.823532] pglazyfree 0 [ 2850.823532] pglazyfreed 0 [ 2850.832589] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=4166,uid=0 [ 2850.834902] Memory cgroup out of memory: Killed process 4166 (syz-executor.6) total-vm:93544kB, anon-rss:36920kB, file-rss:34944kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 16:37:47 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:37:47 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) fork() 16:37:47 executing program 3: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:37:47 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0x0, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:37:47 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:02 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:38:02 executing program 3: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:38:02 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:02 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:02 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) 16:38:02 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:38:02 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:02 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0x0, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2868.005425] syz-executor.6 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2868.006346] CPU: 1 PID: 12053 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2868.006922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2868.007492] Call Trace: [ 2868.007678] [ 2868.007851] dump_stack_lvl+0xc1/0xf0 [ 2868.008148] dump_header+0x10a/0xd50 [ 2868.008427] oom_kill_process+0x25d/0x600 [ 2868.008730] out_of_memory+0x35c/0x1660 [ 2868.009026] ? find_held_lock+0x2c/0x110 [ 2868.009333] ? __pfx_out_of_memory+0x10/0x10 [ 2868.009648] ? rcu_read_unlock+0x9/0x60 [ 2868.009948] ? lock_release+0x1e3/0x710 [ 2868.010243] ? lock_is_held_type+0x9f/0x120 [ 2868.010585] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2868.010922] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2868.011307] ? mem_cgroup_iter+0x291/0x710 [ 2868.011610] try_charge_memcg+0xec4/0x12e0 [ 2868.011928] ? __pfx_try_charge_memcg+0x10/0x10 [ 2868.012271] ? __pfx_lock_release+0x10/0x10 [ 2868.012588] ? trace_lock_acquire+0x170/0x1e0 [ 2868.012923] ? get_mem_cgroup_from_objcg+0x15d/0x290 [ 2868.013285] ? lock_acquire+0x32/0xc0 [ 2868.013570] ? get_mem_cgroup_from_objcg+0x15d/0x290 [ 2868.013941] __memcg_kmem_charge_page+0x167/0x3d0 [ 2868.014288] __alloc_pages+0x1f3/0x510 [ 2868.014573] ? __pfx___alloc_pages+0x10/0x10 [ 2868.014896] ? find_held_lock+0x2c/0x110 [ 2868.015198] ? __pfx_lock_release+0x10/0x10 [ 2868.015518] ? do_raw_spin_lock+0x125/0x270 [ 2868.015843] alloc_pages+0x1a0/0x260 [ 2868.016128] __pmd_alloc+0x3b/0x690 [ 2868.016402] copy_page_range+0x27a3/0x37d0 [ 2868.016703] ? __pfx___lock_acquire+0x10/0x10 [ 2868.017041] ? find_held_lock+0x2c/0x110 [ 2868.017339] ? lock_is_held_type+0x9f/0x120 [ 2868.017637] ? mas_wr_modify+0x982/0x1660 [ 2868.017964] ? __pfx_copy_page_range+0x10/0x10 [ 2868.018298] ? __pfx_mas_store+0x10/0x10 [ 2868.018607] ? lock_is_held_type+0x9f/0x120 [ 2868.018928] dup_mmap+0xa7c/0x1120 [ 2868.019198] ? __pfx_dup_mmap+0x10/0x10 [ 2868.019494] ? lockdep_init_map_type+0x21e/0x7e0 [ 2868.019849] ? mm_init+0x945/0xc50 [ 2868.020108] copy_process+0x3b05/0x7390 [ 2868.020397] ? lock_is_held_type+0x9f/0x120 [ 2868.020714] ? find_held_lock+0x2c/0x110 [ 2868.021024] ? __pfx_copy_process+0x10/0x10 [ 2868.021327] ? lock_acquire+0x32/0xc0 [ 2868.021614] ? __might_fault+0xa9/0x180 [ 2868.021921] ? _copy_from_user+0xf6/0x180 [ 2868.022241] kernel_clone+0xeb/0x8c0 [ 2868.022522] ? lock_is_held_type+0x9f/0x120 [ 2868.022840] ? __pfx_kernel_clone+0x10/0x10 [ 2868.023167] __do_sys_clone3+0x1d5/0x2e0 [ 2868.023466] ? __pfx___do_sys_clone3+0x10/0x10 [ 2868.023832] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2868.024217] do_syscall_64+0x3f/0x90 [ 2868.024496] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2868.024872] RIP: 0033:0x7fd09934cb19 [ 2868.025139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2868.026397] RSP: 002b:00007fd0968a1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2868.026901] RAX: ffffffffffffffda RBX: 00007fd099460020 RCX: 00007fd09934cb19 [ 2868.027400] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001c40 [ 2868.027897] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2868.028389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2868.028885] R13: 00007fff0b4f3eef R14: 00007fd0968a1300 R15: 0000000000022000 [ 2868.029403] [ 2868.029653] memory: usage 307200kB, limit 307200kB, failcnt 13085 [ 2868.030111] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2868.030545] Memory cgroup stats for /syz6: [ 2868.030886] anon 303235072 [ 2868.030886] file 4333568 [ 2868.030886] kernel 7004160 [ 2868.030886] kernel_stack 1048576 [ 2868.030886] pagetables 4182016 [ 2868.030886] sec_pagetables 0 [ 2868.030886] percpu 1856 [ 2868.030886] sock 0 [ 2868.030886] vmalloc 0 [ 2868.030886] shmem 0 [ 2868.030886] file_mapped 4333568 [ 2868.030886] file_dirty 8192 [ 2868.030886] file_writeback 0 [ 2868.030886] swapcached 0 [ 2868.030886] inactive_anon 286343168 [ 2868.030886] active_anon 0 [ 2868.030886] inactive_file 0 [ 2868.030886] active_file 0 [ 2868.030886] unevictable 21225472 [ 2868.030886] slab_reclaimable 114152 [ 2868.030886] slab_unreclaimable 1049712 [ 2868.030886] slab 1163864 [ 2868.030886] workingset_refault_anon 0 [ 2868.030886] workingset_refault_file 3579 [ 2868.030886] workingset_activate_anon 0 [ 2868.030886] workingset_activate_file 148 [ 2868.030886] workingset_restore_anon 0 [ 2868.030886] workingset_restore_file 24 [ 2868.030886] workingset_nodereclaim 0 [ 2868.030886] pgscan 13465 [ 2868.030886] pgsteal 7594 [ 2868.030886] pgscan_kswapd 948 [ 2868.030886] pgscan_direct 12517 [ 2868.030886] pgscan_khugepaged 0 [ 2868.030886] pgsteal_kswapd 326 [ 2868.030886] pgsteal_direct 7268 [ 2868.030886] pgsteal_khugepaged 0 [ 2868.030886] pgfault 1183806 [ 2868.030886] pgmajfault 48 [ 2868.030886] pgrefill 1244 [ 2868.030886] pgactivate 157851 [ 2868.030886] pgdeactivate 1219 [ 2868.030886] pglazyfree 0 [ 2868.030886] pglazyfreed 0 [ 2868.040301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=4095,uid=0 [ 2868.042065] Memory cgroup out of memory: Killed process 4095 (syz-executor.6) total-vm:93544kB, anon-rss:36920kB, file-rss:34944kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 16:38:04 executing program 3: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) 16:38:04 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r9, 0x2, r1, 0x764000}) 16:38:04 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:04 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:38:04 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) 16:38:04 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) 16:38:04 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0x0, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:04 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) 16:38:18 executing program 3: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) 16:38:18 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:18 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) 16:38:18 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:38:18 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:18 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r9, 0x2, r1, 0x764000}) 16:38:18 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) 16:38:18 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:38:18 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0x0, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:18 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:18 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r9, 0x2, r1, 0x764000}) 16:38:18 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:18 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0x0, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:19 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:21 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x0, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:38:21 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2886.110227] syz-executor.6 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2886.111637] CPU: 0 PID: 12190 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2886.112634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2886.113609] Call Trace: [ 2886.113937] [ 2886.114226] dump_stack_lvl+0xc1/0xf0 [ 2886.114749] dump_header+0x10a/0xd50 [ 2886.115241] oom_kill_process+0x25d/0x600 [ 2886.115765] out_of_memory+0x35c/0x1660 [ 2886.116280] ? find_held_lock+0x2c/0x110 [ 2886.116798] ? __pfx_out_of_memory+0x10/0x10 [ 2886.117351] ? rcu_read_unlock+0x9/0x60 [ 2886.117882] ? lock_release+0x1e3/0x710 [ 2886.118405] ? lock_is_held_type+0x9f/0x120 [ 2886.118975] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2886.119574] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2886.120241] ? mem_cgroup_iter+0x291/0x710 [ 2886.120793] try_charge_memcg+0xec4/0x12e0 [ 2886.121341] ? lock_is_held_type+0x40/0x120 [ 2886.121901] ? __pfx_try_charge_memcg+0x10/0x10 [ 2886.122503] ? lock_release+0x1e3/0x710 [ 2886.123042] ? __pfx_lock_release+0x10/0x10 [ 2886.123593] ? trace_lock_acquire+0x170/0x1e0 [ 2886.124181] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2886.124792] ? lock_acquire+0x32/0xc0 [ 2886.125291] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2886.125908] charge_memcg+0x85/0x2c0 [ 2886.126402] __mem_cgroup_charge+0x28/0x90 [ 2886.126940] __filemap_add_folio+0x5c3/0xdb0 [ 2886.127519] ? __pfx___filemap_add_folio+0x10/0x10 [ 2886.128137] ? __pfx_workingset_update_node+0x10/0x10 [ 2886.128785] ? alloc_pages+0x1a8/0x260 [ 2886.129292] filemap_add_folio+0x9f/0x1c0 [ 2886.129820] ? __pfx_filemap_add_folio+0x10/0x10 [ 2886.130436] ? xas_load+0x6a/0x140 [ 2886.130934] __filemap_get_folio+0x388/0xcd0 [ 2886.131509] ? __pfx___filemap_get_folio+0x10/0x10 [ 2886.132121] ? filemap_fault+0x1444/0x2120 [ 2886.132663] ? filemap_fault+0x1444/0x2120 [ 2886.133193] ? lock_acquire+0x32/0xc0 [ 2886.133693] ? filemap_fault+0x1444/0x2120 [ 2886.134237] filemap_fault+0x1484/0x2120 [ 2886.134777] ? __pfx_filemap_fault+0x10/0x10 [ 2886.135376] ? __pfx_filemap_map_pages+0x10/0x10 [ 2886.135971] __do_fault+0x10d/0x590 [ 2886.136456] ? __pfx_filemap_map_pages+0x10/0x10 [ 2886.137048] __handle_mm_fault+0x1287/0x31c0 [ 2886.137602] ? lock_acquire.part.0+0xec/0x320 [ 2886.138190] ? lock_is_held_type+0x9f/0x120 [ 2886.138756] ? __pfx___handle_mm_fault+0x10/0x10 [ 2886.139393] handle_mm_fault+0x1b8/0x860 [ 2886.139917] __get_user_pages+0x4d6/0x1060 [ 2886.140473] ? __pfx___get_user_pages+0x10/0x10 [ 2886.141059] ? __pfx_mt_find+0x10/0x10 [ 2886.141549] ? __down_read_common+0x819/0xee0 [ 2886.142122] ? __pfx___down_read_common+0x10/0x10 [ 2886.142744] populate_vma_page_range+0x2e7/0x420 [ 2886.143347] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2886.144009] ? __pfx_find_vma_intersection+0x10/0x10 [ 2886.144649] ? lock_acquire+0x32/0xc0 [ 2886.145145] ? __mm_populate+0x228/0x3a0 [ 2886.145675] __mm_populate+0x102/0x3a0 [ 2886.146178] ? __pfx___mm_populate+0x10/0x10 [ 2886.146757] ? up_write+0x196/0x510 [ 2886.147234] __do_sys_mlockall+0x414/0x4a0 [ 2886.147771] do_syscall_64+0x3f/0x90 [ 2886.148264] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2886.148917] RIP: 0033:0x7fd09934cb19 [ 2886.149385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2886.151537] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2886.152458] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2886.153317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2886.154163] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2886.155048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2886.155900] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2886.156787] [ 2886.157244] memory: usage 307200kB, limit 307200kB, failcnt 13691 [ 2886.158025] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2886.158779] Memory cgroup stats for /syz6: [ 2886.159006] anon 303235072 [ 2886.159006] file 4476928 [ 2886.159006] kernel 6860800 [ 2886.159006] kernel_stack 1015808 [ 2886.159006] pagetables 4108288 [ 2886.159006] sec_pagetables 0 [ 2886.159006] percpu 1792 [ 2886.159006] sock 0 [ 2886.159006] vmalloc 0 [ 2886.159006] shmem 0 [ 2886.159006] file_mapped 4468736 [ 2886.159006] file_dirty 28672 [ 2886.159006] file_writeback 0 [ 2886.159006] swapcached 0 [ 2886.159006] inactive_anon 286343168 [ 2886.159006] active_anon 0 [ 2886.159006] inactive_file 0 [ 2886.159006] active_file 8192 [ 2886.159006] unevictable 21360640 [ 2886.159006] slab_reclaimable 116224 [ 2886.159006] slab_unreclaimable 1029256 [ 2886.159006] slab 1145480 [ 2886.159006] workingset_refault_anon 0 [ 2886.159006] workingset_refault_file 5145 [ 2886.159006] workingset_activate_anon 0 [ 2886.159006] workingset_activate_file 210 [ 2886.159006] workingset_restore_anon 0 [ 2886.159006] workingset_restore_file 37 [ 2886.159006] workingset_nodereclaim 0 [ 2886.159006] pgscan 17889 [ 2886.159006] pgsteal 9125 [ 2886.159006] pgscan_kswapd 1153 [ 2886.159006] pgscan_direct 16736 [ 2886.159006] pgscan_khugepaged 0 [ 2886.159006] pgsteal_kswapd 329 [ 2886.159006] pgsteal_direct 8796 [ 2886.159006] pgsteal_khugepaged 0 [ 2886.159006] pgfault 1191970 [ 2886.159006] pgmajfault 65 [ 2886.159006] pgrefill 1448 [ 2886.159006] pgactivate 158051 [ 2886.159006] pgdeactivate 1423 [ 2886.159006] pglazyfree 0 [ 2886.159006] pglazyfreed 0 [ 2886.174497] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=4065,uid=0 [ 2886.176522] Memory cgroup out of memory: Killed process 4065 (syz-executor.6) total-vm:93544kB, anon-rss:36920kB, file-rss:34944kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 2886.440676] syz-executor.6 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 2886.442034] CPU: 0 PID: 12190 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2886.443038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2886.444020] Call Trace: [ 2886.444344] [ 2886.444639] dump_stack_lvl+0xc1/0xf0 [ 2886.445145] dump_header+0x10a/0xd50 [ 2886.445635] oom_kill_process+0x25d/0x600 [ 2886.446165] out_of_memory+0x35c/0x1660 [ 2886.446682] ? find_held_lock+0x2c/0x110 [ 2886.447207] ? __pfx_out_of_memory+0x10/0x10 [ 2886.447764] ? rcu_read_unlock+0x9/0x60 [ 2886.448285] ? lock_release+0x1e3/0x710 [ 2886.448797] ? lock_is_held_type+0x9f/0x120 [ 2886.449373] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2886.449988] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2886.450670] ? mem_cgroup_iter+0x291/0x710 [ 2886.451259] try_charge_memcg+0xec4/0x12e0 [ 2886.451820] ? lock_is_held_type+0x40/0x120 [ 2886.452378] ? __pfx_try_charge_memcg+0x10/0x10 [ 2886.452971] ? lock_release+0x1e3/0x710 [ 2886.453492] ? __pfx_lock_release+0x10/0x10 [ 2886.454047] ? trace_lock_acquire+0x170/0x1e0 [ 2886.454629] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2886.455267] ? lock_acquire+0x32/0xc0 [ 2886.455765] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2886.456383] charge_memcg+0x85/0x2c0 [ 2886.456875] __mem_cgroup_charge+0x28/0x90 [ 2886.457403] __filemap_add_folio+0x5c3/0xdb0 [ 2886.457982] ? __pfx___filemap_add_folio+0x10/0x10 [ 2886.458607] ? __pfx_workingset_update_node+0x10/0x10 [ 2886.459254] ? alloc_pages+0x1a8/0x260 [ 2886.459762] filemap_add_folio+0x9f/0x1c0 [ 2886.460289] ? __pfx_filemap_add_folio+0x10/0x10 [ 2886.460951] ? xas_load+0x6a/0x140 [ 2886.461430] __filemap_get_folio+0x388/0xcd0 [ 2886.462000] ? __pfx___filemap_get_folio+0x10/0x10 [ 2886.462616] ? filemap_fault+0x1444/0x2120 [ 2886.463173] ? filemap_fault+0x1444/0x2120 [ 2886.463706] ? lock_acquire+0x32/0xc0 [ 2886.464203] ? filemap_fault+0x1444/0x2120 [ 2886.464745] filemap_fault+0x1484/0x2120 [ 2886.465279] ? __pfx_filemap_fault+0x10/0x10 [ 2886.465864] ? __pfx_filemap_map_pages+0x10/0x10 [ 2886.466456] __do_fault+0x10d/0x590 [ 2886.466949] ? __pfx_filemap_map_pages+0x10/0x10 [ 2886.467538] __handle_mm_fault+0x1287/0x31c0 [ 2886.468085] ? lock_acquire.part.0+0xec/0x320 [ 2886.468661] ? lock_is_held_type+0x9f/0x120 [ 2886.469205] ? __pfx___handle_mm_fault+0x10/0x10 [ 2886.469835] handle_mm_fault+0x1b8/0x860 [ 2886.470361] __get_user_pages+0x4d6/0x1060 [ 2886.470924] ? __pfx___get_user_pages+0x10/0x10 [ 2886.471510] ? __pfx_mt_find+0x10/0x10 [ 2886.472005] ? __down_read_common+0x819/0xee0 [ 2886.472575] ? __pfx___down_read_common+0x10/0x10 [ 2886.473196] populate_vma_page_range+0x2e7/0x420 [ 2886.473801] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2886.474453] ? __pfx_find_vma_intersection+0x10/0x10 [ 2886.475121] ? lock_acquire+0x32/0xc0 [ 2886.475619] ? __mm_populate+0x228/0x3a0 [ 2886.476146] __mm_populate+0x102/0x3a0 [ 2886.476655] ? __pfx___mm_populate+0x10/0x10 [ 2886.477255] ? up_write+0x196/0x510 [ 2886.477727] __do_sys_mlockall+0x414/0x4a0 [ 2886.478263] do_syscall_64+0x3f/0x90 [ 2886.478755] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2886.479420] RIP: 0033:0x7fd09934cb19 [ 2886.479888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2886.482357] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2886.483432] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2886.484428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2886.485422] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2886.486412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2886.487419] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2886.488452] [ 2886.489499] memory: usage 307200kB, limit 307200kB, failcnt 14139 [ 2886.490414] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2886.491305] Memory cgroup stats for /syz6: [ 2886.491522] anon 303161344 [ 2886.491522] file 4796416 [ 2886.491522] kernel 6615040 [ 2886.491522] kernel_stack 983040 [ 2886.491522] pagetables 3932160 [ 2886.491522] sec_pagetables 0 [ 2886.491522] percpu 1792 [ 2886.491522] sock 0 [ 2886.491522] vmalloc 0 [ 2886.491522] shmem 0 [ 2886.491522] file_mapped 4788224 [ 2886.491522] file_dirty 28672 [ 2886.491522] file_writeback 0 [ 2886.491522] swapcached 0 [ 2886.491522] inactive_anon 286269440 [ 2886.491522] active_anon 0 [ 2886.491522] inactive_file 0 [ 2886.491522] active_file 8192 [ 2886.491522] unevictable 21680128 [ 2886.491522] slab_reclaimable 116224 [ 2886.491522] slab_unreclaimable 1006288 [ 2886.491522] slab 1122512 [ 2886.491522] workingset_refault_anon 0 [ 2886.491522] workingset_refault_file 5350 [ 2886.491522] workingset_activate_anon 0 [ 2886.491522] workingset_activate_file 211 [ 2886.491522] workingset_restore_anon 0 [ 2886.491522] workingset_restore_file 37 [ 2886.491522] workingset_nodereclaim 0 [ 2886.491522] pgscan 18960 [ 2886.491522] pgsteal 9252 [ 2886.491522] pgscan_kswapd 1153 [ 2886.491522] pgscan_direct 17807 [ 2886.491522] pgscan_khugepaged 0 [ 2886.491522] pgsteal_kswapd 329 [ 2886.491522] pgsteal_direct 8923 [ 2886.491522] pgsteal_khugepaged 0 [ 2886.491522] pgfault 1191997 [ 2886.491522] pgmajfault 73 [ 2886.491522] pgrefill 1729 [ 2886.491522] pgactivate 158332 [ 2886.491522] pgdeactivate 1704 [ 2886.491522] pglazyfree 0 [ 2886.491522] pglazyfreed 0 [ 2886.508989] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=4125,uid=0 [ 2886.511756] Memory cgroup out of memory: Killed process 4125 (syz-executor.6) total-vm:93544kB, anon-rss:36920kB, file-rss:34896kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 16:38:35 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, 0x0, &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:38:35 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:35 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:35 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) fork() 16:38:35 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0x0, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:35 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:38:35 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:38:35 executing program 3: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) 16:38:36 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x6, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:38:36 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:36 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x6, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2900.471980] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2900.473263] CPU: 1 PID: 12202 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2900.474304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2900.475346] Call Trace: [ 2900.475688] [ 2900.475991] dump_stack_lvl+0xc1/0xf0 [ 2900.476521] dump_header+0x10a/0xd50 [ 2900.477030] oom_kill_process+0x25d/0x600 [ 2900.477588] out_of_memory+0x35c/0x1660 [ 2900.478125] ? find_held_lock+0x2c/0x110 [ 2900.478667] ? __pfx_out_of_memory+0x10/0x10 [ 2900.479250] ? rcu_read_unlock+0x9/0x60 [ 2900.479800] ? lock_release+0x1e3/0x710 [ 2900.480338] ? lock_is_held_type+0x9f/0x120 [ 2900.480928] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2900.481557] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2900.482261] ? mem_cgroup_iter+0x291/0x710 [ 2900.482796] try_charge_memcg+0xec4/0x12e0 [ 2900.483381] ? lock_is_held_type+0x40/0x120 [ 2900.483972] ? __pfx_try_charge_memcg+0x10/0x10 [ 2900.484625] ? lock_release+0x1e3/0x710 [ 2900.485179] ? __pfx_lock_release+0x10/0x10 [ 2900.485767] ? trace_lock_acquire+0x170/0x1e0 [ 2900.486382] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2900.487019] ? lock_acquire+0x32/0xc0 [ 2900.487537] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2900.488180] charge_memcg+0x85/0x2c0 [ 2900.488701] __mem_cgroup_charge+0x28/0x90 [ 2900.489255] __handle_mm_fault+0x102b/0x31c0 [ 2900.489840] ? lock_acquire.part.0+0xec/0x320 [ 2900.490482] ? lock_is_held_type+0x9f/0x120 [ 2900.491174] ? __pfx___handle_mm_fault+0x10/0x10 [ 2900.491841] handle_mm_fault+0x1b8/0x860 [ 2900.492386] __get_user_pages+0x4d6/0x1060 [ 2900.492963] ? __pfx___get_user_pages+0x10/0x10 [ 2900.493588] ? __pfx_mt_find+0x10/0x10 [ 2900.494086] populate_vma_page_range+0x2e7/0x420 [ 2900.494723] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2900.495366] ? __pfx_find_vma_intersection+0x10/0x10 [ 2900.496058] ? lock_acquire+0x32/0xc0 [ 2900.496528] ? __mm_populate+0x228/0x3a0 [ 2900.497079] __mm_populate+0x102/0x3a0 [ 2900.497559] ? __pfx___mm_populate+0x10/0x10 [ 2900.498158] ? up_write+0x196/0x510 [ 2900.498701] __do_sys_mlockall+0x414/0x4a0 [ 2900.499286] do_syscall_64+0x3f/0x90 [ 2900.499753] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2900.500436] RIP: 0033:0x7fd09934cb19 [ 2900.500930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2900.503575] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2900.504707] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2900.505761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2900.506844] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2900.507906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2900.508964] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2900.510053] [ 2900.510631] memory: usage 307200kB, limit 307200kB, failcnt 14260 [ 2900.511747] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2900.512634] Memory cgroup stats for /syz6: [ 2900.512891] anon 308207616 [ 2900.512891] file 143360 [ 2900.512891] kernel 6221824 [ 2900.512891] kernel_stack 884736 [ 2900.512891] pagetables 3727360 [ 2900.512891] sec_pagetables 0 [ 2900.512891] percpu 1664 [ 2900.512891] sock 0 [ 2900.512891] vmalloc 0 [ 2900.512891] shmem 0 [ 2900.512891] file_mapped 139264 [ 2900.512891] file_dirty 0 [ 2900.512891] file_writeback 0 [ 2900.512891] swapcached 0 [ 2900.512891] inactive_anon 302997504 [ 2900.512891] active_anon 0 [ 2900.512891] inactive_file 0 [ 2900.512891] active_file 4096 [ 2900.512891] unevictable 5349376 [ 2900.512891] slab_reclaimable 114688 [ 2900.512891] slab_unreclaimable 947216 [ 2900.512891] slab 1061904 [ 2900.512891] workingset_refault_anon 0 [ 2900.512891] workingset_refault_file 5366 [ 2900.512891] workingset_activate_anon 0 [ 2900.512891] workingset_activate_file 211 [ 2900.512891] workingset_restore_anon 0 [ 2900.512891] workingset_restore_file 37 [ 2900.512891] workingset_nodereclaim 0 [ 2900.512891] pgscan 20287 [ 2900.512891] pgsteal 10405 [ 2900.512891] pgscan_kswapd 1162 [ 2900.512891] pgscan_direct 19125 [ 2900.512891] pgscan_khugepaged 0 [ 2900.512891] pgsteal_kswapd 329 [ 2900.512891] pgsteal_direct 10076 [ 2900.512891] pgsteal_khugepaged 0 [ 2900.512891] pgfault 1193303 [ 2900.512891] pgmajfault 74 [ 2900.512891] pgrefill 1863 [ 2900.512891] pgactivate 158505 [ 2900.512891] pgdeactivate 1838 [ 2900.512891] pglazyfree 0 [ 2900.512891] pglazyfreed 0 [ 2900.529013] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=4219,uid=0 [ 2900.530976] Memory cgroup out of memory: Killed process 4219 (syz-executor.6) total-vm:93544kB, anon-rss:36920kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 2900.554603] syz-executor.3 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2900.556677] CPU: 0 PID: 12211 Comm: syz-executor.3 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2900.557760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2900.558837] Call Trace: [ 2900.559204] [ 2900.559521] dump_stack_lvl+0xc1/0xf0 [ 2900.560080] dump_header+0x10a/0xd50 [ 2900.560603] oom_kill_process+0x25d/0x600 [ 2900.561177] out_of_memory+0x1365/0x1660 [ 2900.561776] ? __pfx_out_of_memory+0x10/0x10 [ 2900.562404] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2900.563280] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2900.564131] ? lock_is_held_type+0x9f/0x120 [ 2900.564763] ? prepare_alloc_pages+0x377/0x500 [ 2900.565414] ? lock_is_held_type+0x9f/0x120 [ 2900.566030] __alloc_pages+0x430/0x510 [ 2900.566727] ? __lock_acquire+0xbd4/0x63b0 [ 2900.567339] ? __pfx___alloc_pages+0x10/0x10 [ 2900.567979] ? mark_lock.part.0+0xef/0x2f30 [ 2900.568581] ? __pfx___lock_acquire+0x10/0x10 [ 2900.569222] vma_alloc_folio+0xe2/0x440 [ 2900.569766] __handle_mm_fault+0xfde/0x31c0 [ 2900.570357] ? lock_acquire.part.0+0xec/0x320 [ 2900.571007] ? lock_is_held_type+0x9f/0x120 [ 2900.571608] ? __pfx___handle_mm_fault+0x10/0x10 [ 2900.572296] handle_mm_fault+0x1b8/0x860 [ 2900.572862] __get_user_pages+0x4d6/0x1060 [ 2900.573465] ? __pfx___get_user_pages+0x10/0x10 [ 2900.574109] ? __pfx_mt_find+0x10/0x10 [ 2900.574673] populate_vma_page_range+0x2e7/0x420 [ 2900.575354] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2900.576071] ? __pfx_find_vma_intersection+0x10/0x10 [ 2900.576763] ? lock_acquire+0x32/0xc0 [ 2900.577306] ? __mm_populate+0x228/0x3a0 [ 2900.577888] __mm_populate+0x102/0x3a0 [ 2900.578440] ? __pfx___mm_populate+0x10/0x10 [ 2900.579069] ? up_write+0x196/0x510 [ 2900.579593] __do_sys_mlockall+0x414/0x4a0 [ 2900.580182] do_syscall_64+0x3f/0x90 [ 2900.580721] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2900.581430] RIP: 0033:0x7f53d7cf0b19 [ 2900.581940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2900.584291] RSP: 002b:00007f53d5266188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2900.585287] RAX: ffffffffffffffda RBX: 00007f53d7e03f60 RCX: 00007f53d7cf0b19 [ 2900.586227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2900.587167] RBP: 00007f53d7d4af6d R08: 0000000000000000 R09: 0000000000000000 [ 2900.588107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2900.589047] R13: 00007ffc19cd855f R14: 00007f53d5266300 R15: 0000000000022000 [ 2900.590006] [ 2900.590485] Mem-Info: [ 2900.590923] active_anon:3259 inactive_anon:254310 isolated_anon:0 [ 2900.590923] active_file:141 inactive_file:186 isolated_file:0 [ 2900.590923] unevictable:12928 dirty:5 writeback:0 [ 2900.590923] slab_reclaimable:7743 slab_unreclaimable:53032 [ 2900.590923] mapped:70099 shmem:112 pagetables:4150 [ 2900.590923] sec_pagetables:0 bounce:0 [ 2900.590923] kernel_misc_reclaimable:0 [ 2900.590923] free:3356 free_pcp:0 free_cma:0 [ 2900.595808] Node 0 active_anon:13036kB inactive_anon:1017240kB active_file:564kB inactive_file:660kB unevictable:51712kB isolated(anon):0kB isolated(file):0kB mapped:280396kB dirty:20kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7104kB pagetables:16600kB sec_pagetables:0kB all_unreclaimable? no [ 2900.599263] Node 0 DMA free:6460kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7372kB active_file:0kB inactive_file:0kB unevictable:1064kB writepending:0kB present:15992kB managed:15360kB mlocked:1064kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2900.602641] lowmem_reserve[]: 0 1606 1606 1606 [ 2900.603356] Node 0 DMA32 free:6964kB boost:0kB min:5104kB low:6748kB high:8392kB reserved_highatomic:2048KB active_anon:13036kB inactive_anon:1009952kB active_file:748kB inactive_file:1052kB unevictable:50396kB writepending:20kB present:2080640kB managed:1655460kB mlocked:50396kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2900.607055] lowmem_reserve[]: 0 0 0 0 [ 2900.607627] Node 0 DMA: 11*4kB (UM) 10*8kB (UM) 6*16kB (UE) 7*32kB (U) 6*64kB (UE) 2*128kB (UE) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 6460kB [ 2900.609976] Node 0 DMA32: 274*4kB (UME) 99*8kB (UME) 61*16kB (UME) 48*32kB (UME) 9*64kB (UME) 3*128kB (UE) 1*256kB (M) 2*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 7664kB [ 2900.612254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2900.613392] 800 total pagecache pages [ 2900.613924] 0 pages in swap cache [ 2900.614389] Free swap = 0kB [ 2900.614837] Total swap = 0kB [ 2900.615262] 524158 pages RAM [ 2900.615680] 0 pages HighMem/MovableOnly [ 2900.616232] 106453 pages reserved [ 2900.616700] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=12211,uid=0 [ 2900.620287] Out of memory (oom_kill_allocating_task): Killed process 12210 (syz-executor.3) total-vm:93412kB, anon-rss:11048kB, file-rss:35584kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 2900.930183] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2900.931775] CPU: 1 PID: 12202 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2900.932715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2900.933644] Call Trace: [ 2900.933959] [ 2900.934240] dump_stack_lvl+0xc1/0xf0 [ 2900.934723] dump_header+0x10a/0xd50 [ 2900.935202] oom_kill_process+0x25d/0x600 [ 2900.935699] out_of_memory+0x35c/0x1660 [ 2900.936187] ? find_held_lock+0x2c/0x110 [ 2900.936679] ? __pfx_out_of_memory+0x10/0x10 [ 2900.937205] ? rcu_read_unlock+0x9/0x60 [ 2900.937697] ? lock_release+0x1e3/0x710 [ 2900.938186] ? lock_is_held_type+0x9f/0x120 [ 2900.938723] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2900.939355] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2900.939994] ? mem_cgroup_iter+0x291/0x710 [ 2900.940552] try_charge_memcg+0xec4/0x12e0 [ 2900.941115] ? lock_is_held_type+0x40/0x120 [ 2900.941688] ? __pfx_try_charge_memcg+0x10/0x10 [ 2900.942297] ? lock_release+0x1e3/0x710 [ 2900.942880] ? __pfx_lock_release+0x10/0x10 [ 2900.943527] ? trace_lock_acquire+0x170/0x1e0 [ 2900.944114] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2900.944735] ? lock_acquire+0x32/0xc0 [ 2900.945242] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2900.945874] charge_memcg+0x85/0x2c0 [ 2900.946378] __mem_cgroup_charge+0x28/0x90 [ 2900.946920] __handle_mm_fault+0x102b/0x31c0 [ 2900.947511] ? lock_acquire.part.0+0xec/0x320 [ 2900.948111] ? lock_is_held_type+0x9f/0x120 [ 2900.948675] ? __pfx___handle_mm_fault+0x10/0x10 [ 2900.949322] handle_mm_fault+0x1b8/0x860 [ 2900.949851] __get_user_pages+0x4d6/0x1060 [ 2900.950417] ? __pfx___get_user_pages+0x10/0x10 [ 2900.951026] ? __pfx_mt_find+0x10/0x10 [ 2900.951552] populate_vma_page_range+0x2e7/0x420 [ 2900.952164] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2900.952830] ? __pfx_find_vma_intersection+0x10/0x10 [ 2900.953484] ? lock_acquire+0x32/0xc0 [ 2900.954131] ? __mm_populate+0x228/0x3a0 [ 2900.954673] __mm_populate+0x102/0x3a0 [ 2900.955216] ? __pfx___mm_populate+0x10/0x10 [ 2900.955794] ? up_write+0x196/0x510 [ 2900.956277] __do_sys_mlockall+0x414/0x4a0 [ 2900.956826] do_syscall_64+0x3f/0x90 [ 2900.957324] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2900.957986] RIP: 0033:0x7fd09934cb19 [ 2900.958463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2900.960764] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2900.961710] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2900.962583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2900.963494] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2900.964360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2900.965235] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2900.966131] [ 2900.966481] memory: usage 307200kB, limit 307200kB, failcnt 14292 [ 2900.967291] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2900.968078] Memory cgroup stats for /syz6: [ 2900.968304] anon 308449280 [ 2900.968304] file 143360 [ 2900.968304] kernel 5980160 [ 2900.968304] kernel_stack 851968 [ 2900.968304] pagetables 3551232 [ 2900.968304] sec_pagetables 0 [ 2900.968304] percpu 1664 [ 2900.968304] sock 0 [ 2900.968304] vmalloc 0 [ 2900.968304] shmem 0 [ 2900.968304] file_mapped 139264 [ 2900.968304] file_dirty 0 [ 2900.968304] file_writeback 0 [ 2900.968304] swapcached 0 [ 2900.968304] inactive_anon 302923776 [ 2900.968304] active_anon 0 [ 2900.968304] inactive_file 4096 [ 2900.968304] active_file 0 [ 2900.968304] unevictable 5664768 [ 2900.968304] slab_reclaimable 114688 [ 2900.968304] slab_unreclaimable 924248 [ 2900.968304] slab 1038936 [ 2900.968304] workingset_refault_anon 0 [ 2900.968304] workingset_refault_file 5366 [ 2900.968304] workingset_activate_anon 0 [ 2900.968304] workingset_activate_file 211 [ 2900.968304] workingset_restore_anon 0 [ 2900.968304] workingset_restore_file 37 [ 2900.968304] workingset_nodereclaim 0 [ 2900.968304] pgscan 20467 [ 2900.968304] pgsteal 10405 [ 2900.968304] pgscan_kswapd 1190 [ 2900.968304] pgscan_direct 19277 [ 2900.968304] pgscan_khugepaged 0 [ 2900.968304] pgsteal_kswapd 329 [ 2900.968304] pgsteal_direct 10076 [ 2900.968304] pgsteal_khugepaged 0 [ 2900.968304] pgfault 1193380 [ 2900.968304] pgmajfault 74 [ 2900.968304] pgrefill 2044 [ 2900.968304] pgactivate 158685 [ 2900.968304] pgdeactivate 2019 [ 2900.968304] pglazyfree 0 [ 2900.968304] pglazyfreed 0 [ 2900.983491] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=4217,uid=0 [ 2900.985232] Memory cgroup out of memory: Killed process 4217 (syz-executor.6) total-vm:93544kB, anon-rss:36920kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 16:38:37 executing program 3: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:38:37 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0x0, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:37 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:38:51 executing program 3: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:38:51 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) 16:38:51 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0x0, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:51 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, 0x0, &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:38:51 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:38:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x6, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:51 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) fork() 16:38:51 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0x0, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) [ 2917.345121] systemd-udevd invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=-1000 [ 2917.346076] CPU: 1 PID: 100 Comm: systemd-udevd Not tainted 6.2.0-rc8-next-20230217 #1 [ 2917.346618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2917.347188] Call Trace: [ 2917.347375] [ 2917.347544] dump_stack_lvl+0xc1/0xf0 [ 2917.347835] dump_header+0x10a/0xd50 [ 2917.348109] oom_kill_process+0x25d/0x600 [ 2917.348414] out_of_memory+0x35c/0x1660 [ 2917.348709] ? __pfx_out_of_memory+0x10/0x10 [ 2917.349037] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2917.349453] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2917.349891] ? lock_is_held_type+0x9f/0x120 [ 2917.350221] ? prepare_alloc_pages+0x377/0x500 [ 2917.350566] __alloc_pages+0x430/0x510 [ 2917.350843] ? __pfx___alloc_pages+0x10/0x10 [ 2917.351179] ? __alloc_pages+0x43d/0x510 [ 2917.351465] ? __lock_acquire+0x1936/0x63b0 [ 2917.351790] alloc_pages+0x1a0/0x260 [ 2917.352072] filemap_alloc_folio+0x374/0x410 [ 2917.352378] ? __pfx_lock_release+0x10/0x10 [ 2917.352701] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 2917.353043] ? xas_load+0x6a/0x140 [ 2917.353309] __filemap_get_folio+0x32b/0xcd0 [ 2917.353635] ? __pfx___filemap_get_folio+0x10/0x10 [ 2917.353969] ? filemap_fault+0x1444/0x2120 [ 2917.354283] ? filemap_fault+0x1444/0x2120 [ 2917.354572] ? lock_acquire+0x32/0xc0 [ 2917.354857] ? filemap_fault+0x1444/0x2120 [ 2917.355159] filemap_fault+0x1484/0x2120 [ 2917.355453] ? __pfx_filemap_fault+0x10/0x10 [ 2917.355792] ? __pfx_filemap_map_pages+0x10/0x10 [ 2917.356135] __do_fault+0x10d/0x590 [ 2917.356416] ? __pfx_filemap_map_pages+0x10/0x10 [ 2917.356756] __handle_mm_fault+0x1287/0x31c0 [ 2917.357073] ? lock_acquire.part.0+0xec/0x320 [ 2917.357412] ? lock_is_held_type+0x9f/0x120 [ 2917.357730] ? __pfx___handle_mm_fault+0x10/0x10 [ 2917.358094] handle_mm_fault+0x1b8/0x860 [ 2917.358385] do_user_addr_fault+0x512/0x1320 [ 2917.358716] exc_page_fault+0x9c/0x1a0 [ 2917.358994] asm_exc_page_fault+0x26/0x30 [ 2917.359320] RIP: 0033:0x561b1d4e9c12 [ 2917.359594] Code: Unable to access opcode bytes at 0x561b1d4e9be8. [ 2917.360030] RSP: 002b:00007ffc0600cfa0 EFLAGS: 00010246 [ 2917.360409] RAX: 00007ffc0600cfa0 RBX: 0000561b1e661c31 RCX: 0000000000000037 [ 2917.360906] RDX: 0000000000000001 RSI: 0000561b1e661c31 RDI: 00007ffc0600cfa0 [ 2917.361403] RBP: 00007ffc0600cfe0 R08: 0000000000000001 R09: 00007f75c5c20be0 [ 2917.361900] R10: 0000000000001000 R11: 0000000000000206 R12: 00007ffc0600cff8 [ 2917.362395] R13: 0000000000000001 R14: 00007ffc0600e090 R15: 00007ffc0600e0a0 [ 2917.362905] [ 2917.363179] Mem-Info: [ 2917.363365] active_anon:3259 inactive_anon:261912 isolated_anon:0 [ 2917.363365] active_file:29 inactive_file:19 isolated_file:0 [ 2917.363365] unevictable:5753 dirty:0 writeback:0 [ 2917.363365] slab_reclaimable:7538 slab_unreclaimable:53245 [ 2917.363365] mapped:71193 shmem:112 pagetables:4112 [ 2917.363365] sec_pagetables:0 bounce:0 [ 2917.363365] kernel_misc_reclaimable:0 [ 2917.363365] free:3390 free_pcp:48 free_cma:0 [ 2917.365917] Node 0 active_anon:13036kB inactive_anon:1047648kB active_file:116kB inactive_file:0kB unevictable:23012kB isolated(anon):0kB isolated(file):0kB mapped:284772kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:6944kB pagetables:16448kB sec_pagetables:0kB all_unreclaimable? no [ 2917.367739] Node 0 DMA free:6468kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8048kB active_file:0kB inactive_file:0kB unevictable:252kB writepending:0kB present:15992kB managed:15360kB mlocked:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2917.369594] lowmem_reserve[]: 0 1606 1606 1606 [ 2917.369958] Node 0 DMA32 free:7092kB boost:0kB min:5104kB low:6748kB high:8392kB reserved_highatomic:4096KB active_anon:13036kB inactive_anon:1039600kB active_file:0kB inactive_file:332kB unevictable:22340kB writepending:0kB present:2080640kB managed:1655460kB mlocked:22340kB bounce:0kB free_pcp:192kB local_pcp:0kB free_cma:0kB [ 2917.371903] lowmem_reserve[]: 0 0 0 0 [ 2917.372199] Node 0 DMA: 7*4kB (UM) 5*8kB (UM) 16*16kB (UME) 2*32kB (UM) 9*64kB (UME) 5*128kB (UME) 3*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 0*2048kB 0*4096kB = 6468kB [ 2917.373389] Node 0 DMA32: 124*4kB (UMEH) 104*8kB (UMEH) 34*16kB (UMEH) 66*32kB (MEH) 23*64kB (ME) 6*128kB (MEH) 3*256kB (MH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6992kB [ 2917.374547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2917.375171] 1744 total pagecache pages [ 2917.375443] 0 pages in swap cache [ 2917.375680] Free swap = 0kB [ 2917.375919] Total swap = 0kB [ 2917.376134] 524158 pages RAM [ 2917.376348] 0 pages HighMem/MovableOnly [ 2917.376627] 106453 pages reserved [ 2917.376887] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=11825,uid=0 [ 2917.378569] Out of memory: Killed process 11825 (syz-executor.3) total-vm:93676kB, anon-rss:37048kB, file-rss:34944kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:1000 16:38:53 executing program 3: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:38:53 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x6, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:53 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) fork() 16:38:53 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, 0x0, &(0x7f0000000500), &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:38:53 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:53 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) 16:38:53 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) [ 2917.640574] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2917.641251] CPU: 1 PID: 12587 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2917.641795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2917.642335] Call Trace: [ 2917.642520] [ 2917.642680] dump_stack_lvl+0xc1/0xf0 [ 2917.642966] dump_header+0x10a/0xd50 [ 2917.643232] oom_kill_process+0x25d/0x600 [ 2917.643515] out_of_memory+0x35c/0x1660 [ 2917.643794] ? find_held_lock+0x2c/0x110 [ 2917.644074] ? __pfx_out_of_memory+0x10/0x10 [ 2917.644382] ? rcu_read_unlock+0x9/0x60 [ 2917.644670] ? lock_release+0x1e3/0x710 [ 2917.644950] ? lock_is_held_type+0x9f/0x120 [ 2917.645255] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2917.645591] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2917.645963] ? mem_cgroup_iter+0x291/0x710 [ 2917.646263] try_charge_memcg+0xec4/0x12e0 [ 2917.646557] ? lock_is_held_type+0x40/0x120 [ 2917.646862] ? __pfx_try_charge_memcg+0x10/0x10 [ 2917.647188] ? lock_release+0x1e3/0x710 [ 2917.647468] ? __pfx_lock_release+0x10/0x10 [ 2917.647764] ? trace_lock_acquire+0x170/0x1e0 [ 2917.648074] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2917.648398] ? lock_acquire+0x32/0xc0 [ 2917.648660] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2917.648998] charge_memcg+0x85/0x2c0 [ 2917.649262] __mem_cgroup_charge+0x28/0x90 [ 2917.649556] __handle_mm_fault+0x102b/0x31c0 [ 2917.649872] ? lock_acquire.part.0+0xec/0x320 [ 2917.650203] ? lock_is_held_type+0x9f/0x120 [ 2917.650522] ? __pfx___handle_mm_fault+0x10/0x10 [ 2917.650886] handle_mm_fault+0x1b8/0x860 [ 2917.651193] __get_user_pages+0x4d6/0x1060 [ 2917.651512] ? __pfx___get_user_pages+0x10/0x10 [ 2917.651860] ? __pfx_mt_find+0x10/0x10 [ 2917.652150] populate_vma_page_range+0x2e7/0x420 [ 2917.652497] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2917.652875] ? __pfx_find_vma_intersection+0x10/0x10 [ 2917.653246] ? lock_acquire+0x32/0xc0 [ 2917.653535] ? __mm_populate+0x228/0x3a0 [ 2917.653842] __mm_populate+0x102/0x3a0 [ 2917.654137] ? __pfx___mm_populate+0x10/0x10 [ 2917.654464] ? up_write+0x196/0x510 [ 2917.654737] __do_sys_mlockall+0x414/0x4a0 [ 2917.655044] do_syscall_64+0x3f/0x90 [ 2917.655333] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2917.655703] RIP: 0033:0x7fd09934cb19 [ 2917.655970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2917.657292] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2917.657827] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2917.658298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2917.658758] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2917.659232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2917.659697] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2917.660176] [ 2917.661195] memory: usage 307200kB, limit 307200kB, failcnt 14363 [ 2917.661609] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2917.662201] Memory cgroup stats for /syz6: [ 2917.662346] anon 308019200 [ 2917.662346] file 135168 [ 2917.662346] kernel 6418432 [ 2917.662346] kernel_stack 917504 [ 2917.662346] pagetables 3825664 [ 2917.662346] sec_pagetables 0 [ 2917.662346] percpu 1728 [ 2917.662346] sock 0 [ 2917.662346] vmalloc 0 [ 2917.662346] shmem 0 [ 2917.662346] file_mapped 126976 [ 2917.662346] file_dirty 0 [ 2917.662346] file_writeback 0 [ 2917.662346] swapcached 0 [ 2917.662346] inactive_anon 299274240 [ 2917.662346] active_anon 0 [ 2917.662346] inactive_file 4096 [ 2917.662346] active_file 4096 [ 2917.662346] unevictable 8871936 [ 2917.662346] slab_reclaimable 117864 [ 2917.662346] slab_unreclaimable 989072 [ 2917.662346] slab 1106936 [ 2917.662346] workingset_refault_anon 0 [ 2917.662346] workingset_refault_file 6272 [ 2917.662346] workingset_activate_anon 0 [ 2917.662346] workingset_activate_file 211 [ 2917.662346] workingset_restore_anon 0 [ 2917.662346] workingset_restore_file 37 [ 2917.662346] workingset_nodereclaim 0 [ 2917.662346] pgscan 22016 [ 2917.662346] pgsteal 11313 [ 2917.662346] pgscan_kswapd 1200 [ 2917.662346] pgscan_direct 20816 [ 2917.662346] pgscan_khugepaged 0 [ 2917.662346] pgsteal_kswapd 329 [ 2917.662346] pgsteal_direct 10984 [ 2917.662346] pgsteal_khugepaged 0 [ 2917.662346] pgfault 1202770 [ 2917.662346] pgmajfault 79 [ 2917.662346] pgrefill 2687 [ 2917.662346] pgactivate 159470 [ 2917.662346] pgdeactivate 2662 [ 2917.662346] pglazyfree 0 [ 2917.662346] pglazyfreed 0 [ 2917.670757] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=4167,uid=0 [ 2917.671856] Memory cgroup out of memory: Killed process 4167 (syz-executor.6) total-vm:93544kB, anon-rss:36920kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 16:38:53 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) 16:38:54 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:54 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:54 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:38:54 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x6, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:54 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:54 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:38:54 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x0, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:38:54 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:38:54 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:39:07 executing program 3: mlockall(0x1) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:39:07 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:39:07 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), 0x0, &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:39:07 executing program 7: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:39:07 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:39:07 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:39:07 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) fork() 16:39:07 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x6, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:39:07 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:39:07 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:39:07 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:39:26 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), 0x0, &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:39:26 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), 0x0, &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:39:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x0, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) [ 2951.730291] syz-executor.7 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2951.731153] CPU: 1 PID: 12974 Comm: syz-executor.7 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2951.731687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2951.732222] Call Trace: [ 2951.732401] [ 2951.732560] dump_stack_lvl+0xc1/0xf0 [ 2951.732843] dump_header+0x10a/0xd50 [ 2951.733105] oom_kill_process+0x25d/0x600 [ 2951.733386] out_of_memory+0x1365/0x1660 [ 2951.733665] ? __pfx_out_of_memory+0x10/0x10 [ 2951.733970] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2951.734376] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2951.734791] ? lock_is_held_type+0x9f/0x120 [ 2951.735100] ? prepare_alloc_pages+0x377/0x500 [ 2951.735412] ? lock_is_held_type+0x9f/0x120 [ 2951.735726] __alloc_pages+0x430/0x510 [ 2951.735996] ? __lock_acquire+0xbd4/0x63b0 [ 2951.736288] ? __pfx___alloc_pages+0x10/0x10 [ 2951.736598] ? mark_lock.part.0+0xef/0x2f30 [ 2951.736903] ? __pfx___lock_acquire+0x10/0x10 [ 2951.737223] vma_alloc_folio+0xe2/0x440 [ 2951.737500] __handle_mm_fault+0xfde/0x31c0 [ 2951.737784] ? lock_acquire.part.0+0xec/0x320 [ 2951.738111] ? lock_is_held_type+0x9f/0x120 [ 2951.738408] ? __pfx___handle_mm_fault+0x10/0x10 [ 2951.738761] handle_mm_fault+0x1b8/0x860 [ 2951.739048] __get_user_pages+0x4d6/0x1060 [ 2951.739352] ? __pfx___get_user_pages+0x10/0x10 [ 2951.739678] ? __pfx_mt_find+0x10/0x10 [ 2951.739963] populate_vma_page_range+0x2e7/0x420 [ 2951.740310] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2951.740683] ? __pfx_find_vma_intersection+0x10/0x10 [ 2951.741061] ? lock_acquire+0x32/0xc0 [ 2951.741345] ? __mm_populate+0x228/0x3a0 [ 2951.741652] __mm_populate+0x102/0x3a0 [ 2951.741942] ? __pfx___mm_populate+0x10/0x10 [ 2951.742273] ? up_write+0x196/0x510 [ 2951.742551] __do_sys_mlockall+0x414/0x4a0 [ 2951.742870] do_syscall_64+0x3f/0x90 [ 2951.743149] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2951.743528] RIP: 0033:0x7fd7734ddb19 [ 2951.743798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2951.745075] RSP: 002b:00007fd770a53188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2951.745615] RAX: ffffffffffffffda RBX: 00007fd7735f0f60 RCX: 00007fd7734ddb19 [ 2951.746122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2951.746621] RBP: 00007fd773537f6d R08: 0000000000000000 R09: 0000000000000000 [ 2951.747124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2951.747629] R13: 00007ffc98b57bcf R14: 00007fd770a53300 R15: 0000000000022000 [ 2951.748141] [ 2951.749048] Mem-Info: [ 2951.749233] active_anon:3259 inactive_anon:260022 isolated_anon:0 [ 2951.749233] active_file:7 inactive_file:0 isolated_file:0 [ 2951.749233] unevictable:5795 dirty:5 writeback:0 [ 2951.749233] slab_reclaimable:7491 slab_unreclaimable:53877 [ 2951.749233] mapped:69854 shmem:112 pagetables:4237 [ 2951.749233] sec_pagetables:0 bounce:0 [ 2951.749233] kernel_misc_reclaimable:0 [ 2951.749233] free:4474 free_pcp:93 free_cma:0 [ 2951.751925] Node 0 active_anon:13036kB inactive_anon:1040088kB active_file:28kB inactive_file:0kB unevictable:23180kB isolated(anon):0kB isolated(file):0kB mapped:279416kB dirty:20kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7072kB pagetables:16948kB sec_pagetables:0kB all_unreclaimable? yes [ 2951.753750] Node 0 DMA free:6464kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:6832kB active_file:12kB inactive_file:16kB unevictable:156kB writepending:0kB present:15992kB managed:15360kB mlocked:156kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2951.755535] lowmem_reserve[]: 0 1606 1606 1606 [ 2951.755911] Node 0 DMA32 free:11432kB boost:0kB min:5104kB low:6748kB high:8392kB reserved_highatomic:8192KB active_anon:13036kB inactive_anon:1033256kB active_file:44kB inactive_file:0kB unevictable:23024kB writepending:20kB present:2080640kB managed:1655460kB mlocked:23024kB bounce:0kB free_pcp:372kB local_pcp:372kB free_cma:0kB [ 2951.757889] lowmem_reserve[]: 0 0 0 0 [ 2951.758191] Node 0 DMA: 23*4kB (UM) 21*8kB (UM) 14*16kB (ME) 9*32kB (M) 5*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6468kB [ 2951.759369] Node 0 DMA32: 147*4kB (UME) 80*8kB (UME) 31*16kB (UME) 144*32kB (UME) 57*64kB (UME) 8*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 11260kB [ 2951.760527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2951.761134] 363 total pagecache pages [ 2951.761404] 0 pages in swap cache [ 2951.761652] Free swap = 0kB [ 2951.761882] Total swap = 0kB [ 2951.762105] 524158 pages RAM [ 2951.762328] 0 pages HighMem/MovableOnly [ 2951.762602] 106453 pages reserved [ 2951.762861] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=12974,uid=0 [ 2951.763989] Out of memory (oom_kill_allocating_task): Killed process 12973 (syz-executor.7) total-vm:93412kB, anon-rss:15528kB, file-rss:35584kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 16:39:26 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:39:26 executing program 3: mlockall(0x1) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:39:26 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) fork() 16:39:28 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:39:28 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x0, 0xfc8d, 0x3f, 0x6, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) [ 2952.206253] syz-executor.6 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 2952.207465] CPU: 0 PID: 12976 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2952.208477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.209461] Call Trace: [ 2952.209786] [ 2952.210079] dump_stack_lvl+0xc1/0xf0 [ 2952.210590] dump_header+0x10a/0xd50 [ 2952.211075] oom_kill_process+0x25d/0x600 [ 2952.211601] out_of_memory+0x35c/0x1660 [ 2952.212119] ? find_held_lock+0x2c/0x110 [ 2952.212646] ? __pfx_out_of_memory+0x10/0x10 [ 2952.213204] ? rcu_read_unlock+0x9/0x60 [ 2952.213719] ? lock_release+0x1e3/0x710 [ 2952.214243] ? lock_is_held_type+0x9f/0x120 [ 2952.214797] mem_cgroup_out_of_memory+0x1e9/0x260 [ 2952.215401] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2952.216099] ? mem_cgroup_iter+0x291/0x710 [ 2952.216664] try_charge_memcg+0xec4/0x12e0 [ 2952.217219] ? lock_is_held_type+0x40/0x120 [ 2952.217781] ? __pfx_try_charge_memcg+0x10/0x10 [ 2952.218371] ? lock_release+0x1e3/0x710 [ 2952.218899] ? __pfx_lock_release+0x10/0x10 [ 2952.219543] ? trace_lock_acquire+0x170/0x1e0 [ 2952.220127] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2952.220735] ? lock_acquire+0x32/0xc0 [ 2952.221234] ? get_mem_cgroup_from_mm+0x24b/0x580 [ 2952.221847] charge_memcg+0x85/0x2c0 [ 2952.222346] __mem_cgroup_charge+0x28/0x90 [ 2952.222877] __handle_mm_fault+0x102b/0x31c0 [ 2952.223428] ? lock_acquire.part.0+0xec/0x320 [ 2952.224024] ? lock_is_held_type+0x9f/0x120 [ 2952.224575] ? __pfx___handle_mm_fault+0x10/0x10 [ 2952.225208] handle_mm_fault+0x1b8/0x860 [ 2952.225728] __get_user_pages+0x4d6/0x1060 [ 2952.226285] ? __pfx___get_user_pages+0x10/0x10 [ 2952.226877] ? __pfx_mt_find+0x10/0x10 [ 2952.227393] populate_vma_page_range+0x2e7/0x420 [ 2952.228011] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2952.228673] ? __pfx_find_vma_intersection+0x10/0x10 [ 2952.229315] ? lock_acquire+0x32/0xc0 [ 2952.229811] ? __mm_populate+0x228/0x3a0 [ 2952.230339] __mm_populate+0x102/0x3a0 [ 2952.230849] ? __pfx___mm_populate+0x10/0x10 [ 2952.231415] ? up_write+0x196/0x510 [ 2952.231895] __do_sys_mlockall+0x414/0x4a0 [ 2952.232432] do_syscall_64+0x3f/0x90 [ 2952.232925] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2952.233577] RIP: 0033:0x7fd09934cb19 [ 2952.234042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.236157] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2952.237074] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2952.237946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2952.238794] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2952.239656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2952.240511] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2952.241391] [ 2952.241930] memory: usage 307200kB, limit 307200kB, failcnt 14432 [ 2952.242930] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2952.243690] Memory cgroup stats for /syz6: [ 2952.243919] anon 307511296 [ 2952.243919] file 188416 [ 2952.243919] kernel 6873088 [ 2952.243919] kernel_stack 983040 [ 2952.243919] pagetables 4096000 [ 2952.243919] sec_pagetables 0 [ 2952.243919] percpu 1856 [ 2952.243919] sock 0 [ 2952.243919] vmalloc 0 [ 2952.243919] shmem 0 [ 2952.243919] file_mapped 184320 [ 2952.243919] file_dirty 0 [ 2952.243919] file_writeback 0 [ 2952.243919] swapcached 0 [ 2952.243919] inactive_anon 295608320 [ 2952.243919] active_anon 0 [ 2952.243919] inactive_file 0 [ 2952.243919] active_file 0 [ 2952.243919] unevictable 12087296 [ 2952.243919] slab_reclaimable 120560 [ 2952.243919] slab_unreclaimable 1061816 [ 2952.243919] slab 1182376 [ 2952.243919] workingset_refault_anon 0 [ 2952.243919] workingset_refault_file 9617 [ 2952.243919] workingset_activate_anon 0 [ 2952.243919] workingset_activate_file 211 [ 2952.243919] workingset_restore_anon 0 [ 2952.243919] workingset_restore_file 37 [ 2952.243919] workingset_nodereclaim 0 [ 2952.243919] pgscan 26020 [ 2952.243919] pgsteal 14646 [ 2952.243919] pgscan_kswapd 1211 [ 2952.243919] pgscan_direct 24809 [ 2952.243919] pgscan_khugepaged 0 [ 2952.243919] pgsteal_kswapd 329 [ 2952.243919] pgsteal_direct 14317 [ 2952.243919] pgsteal_khugepaged 0 [ 2952.243919] pgfault 1212298 [ 2952.243919] pgmajfault 83 [ 2952.243919] pgrefill 3328 [ 2952.243919] pgactivate 160161 [ 2952.243919] pgdeactivate 3303 [ 2952.243919] pglazyfree 0 [ 2952.243919] pglazyfreed 0 [ 2952.259155] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz-executor.6,pid=4123,uid=0 [ 2952.261166] Memory cgroup out of memory: Killed process 4123 (syz-executor.6) total-vm:93544kB, anon-rss:36920kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 16:39:28 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), 0x0, &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:39:29 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:39:29 executing program 3: mlockall(0x1) ioctl$CDROMSTOP(0xffffffffffffffff, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 16:39:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:39:29 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) fork() [ 2954.476920] syz-executor.7 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2954.477777] CPU: 0 PID: 13104 Comm: syz-executor.7 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2954.478312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2954.478843] Call Trace: [ 2954.479023] [ 2954.479182] dump_stack_lvl+0xc1/0xf0 [ 2954.479460] dump_header+0x10a/0xd50 [ 2954.479738] oom_kill_process+0x25d/0x600 [ 2954.480024] out_of_memory+0x1365/0x1660 [ 2954.480310] ? __pfx_out_of_memory+0x10/0x10 [ 2954.480618] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2954.481027] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2954.481437] ? lock_is_held_type+0x9f/0x120 [ 2954.481748] ? prepare_alloc_pages+0x377/0x500 [ 2954.482061] ? lock_is_held_type+0x9f/0x120 [ 2954.482366] __alloc_pages+0x430/0x510 [ 2954.482640] ? __lock_acquire+0xbd4/0x63b0 [ 2954.482940] ? __pfx___alloc_pages+0x10/0x10 [ 2954.483250] ? mark_lock.part.0+0xef/0x2f30 [ 2954.483551] ? __pfx___lock_acquire+0x10/0x10 [ 2954.483881] vma_alloc_folio+0xe2/0x440 [ 2954.484161] __handle_mm_fault+0xfde/0x31c0 [ 2954.484454] ? lock_acquire.part.0+0xec/0x320 [ 2954.484768] ? lock_is_held_type+0x9f/0x120 [ 2954.485064] ? __pfx___handle_mm_fault+0x10/0x10 [ 2954.485409] handle_mm_fault+0x1b8/0x860 [ 2954.485694] __get_user_pages+0x4d6/0x1060 [ 2954.485995] ? __pfx___get_user_pages+0x10/0x10 [ 2954.486318] ? __pfx_mt_find+0x10/0x10 [ 2954.486599] populate_vma_page_range+0x2e7/0x420 [ 2954.486928] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2954.487287] ? __pfx_find_vma_intersection+0x10/0x10 [ 2954.487633] ? lock_acquire+0x32/0xc0 [ 2954.487910] ? __mm_populate+0x228/0x3a0 [ 2954.488201] __mm_populate+0x102/0x3a0 [ 2954.488475] ? __pfx___mm_populate+0x10/0x10 [ 2954.488797] ? up_write+0x196/0x510 [ 2954.489067] __do_sys_mlockall+0x414/0x4a0 [ 2954.489372] do_syscall_64+0x3f/0x90 [ 2954.489653] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2954.490026] RIP: 0033:0x7fd7734ddb19 [ 2954.490303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2954.491528] RSP: 002b:00007fd770a53188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2954.492070] RAX: ffffffffffffffda RBX: 00007fd7735f0f60 RCX: 00007fd7734ddb19 [ 2954.492555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2954.493050] RBP: 00007fd773537f6d R08: 0000000000000000 R09: 0000000000000000 [ 2954.493534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2954.494031] R13: 00007ffc98b57bcf R14: 00007fd770a53300 R15: 0000000000022000 [ 2954.494541] [ 2954.494757] Mem-Info: [ 2954.494956] active_anon:3259 inactive_anon:254902 isolated_anon:0 [ 2954.494956] active_file:29 inactive_file:15 isolated_file:0 [ 2954.494956] unevictable:10120 dirty:4 writeback:0 [ 2954.494956] slab_reclaimable:7462 slab_unreclaimable:53673 [ 2954.494956] mapped:69908 shmem:112 pagetables:4293 [ 2954.494956] sec_pagetables:0 bounce:0 [ 2954.494956] kernel_misc_reclaimable:0 [ 2954.494956] free:5450 free_pcp:26 free_cma:0 [ 2954.497483] Node 0 active_anon:13036kB inactive_anon:1019608kB active_file:116kB inactive_file:60kB unevictable:40480kB isolated(anon):0kB isolated(file):0kB mapped:279632kB dirty:16kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7232kB pagetables:17172kB sec_pagetables:0kB all_unreclaimable? yes [ 2954.499207] Node 0 DMA free:6468kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:6864kB active_file:4kB inactive_file:0kB unevictable:252kB writepending:0kB present:15992kB managed:15360kB mlocked:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2954.500989] lowmem_reserve[]: 0 1606 1606 1606 [ 2954.501339] Node 0 DMA32 free:15332kB boost:0kB min:5104kB low:6748kB high:8392kB reserved_highatomic:14336KB active_anon:13036kB inactive_anon:1012744kB active_file:116kB inactive_file:4kB unevictable:39808kB writepending:16kB present:2080640kB managed:1655460kB mlocked:39808kB bounce:0kB free_pcp:104kB local_pcp:8kB free_cma:0kB [ 2954.503289] lowmem_reserve[]: 0 0 0 0 [ 2954.503585] Node 0 DMA: 3*4kB (UM) 19*8kB (UM) 14*16kB (ME) 12*32kB (UM) 5*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6468kB [ 2954.504758] Node 0 DMA32: 19*4kB (MEH) 67*8kB (UME) 38*16kB (UMEH) 88*32kB (UME) 29*64kB (UMEH) 8*128kB (MEH) 2*256kB (M) 11*512kB (MH) 2*1024kB (UM) 0*2048kB 0*4096kB = 15108kB [ 2954.506000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2954.506591] 434 total pagecache pages [ 2954.506873] 0 pages in swap cache [ 2954.507116] Free swap = 0kB [ 2954.507335] Total swap = 0kB [ 2954.507541] 524158 pages RAM [ 2954.507763] 0 pages HighMem/MovableOnly [ 2954.508056] 106453 pages reserved [ 2954.508298] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=13104,uid=0 [ 2954.510015] Out of memory (oom_kill_allocating_task): Killed process 13101 (syz-executor.7) total-vm:93412kB, anon-rss:9000kB, file-rss:35584kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 16:39:44 executing program 3: mlockall(0x0) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:39:44 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), 0x0, &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:39:44 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), 0x0, &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:39:44 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:39:44 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) fork() 16:39:44 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) [ 2969.336092] syz-executor.7 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2969.336958] CPU: 1 PID: 13122 Comm: syz-executor.7 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2969.337492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2969.338039] Call Trace: [ 2969.338219] [ 2969.338386] dump_stack_lvl+0xc1/0xf0 [ 2969.338663] dump_header+0x10a/0xd50 [ 2969.338930] oom_kill_process+0x25d/0x600 [ 2969.339223] out_of_memory+0x1365/0x1660 [ 2969.339507] ? __pfx_out_of_memory+0x10/0x10 [ 2969.339821] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2969.340241] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2969.340647] ? lock_is_held_type+0x9f/0x120 [ 2969.340952] ? prepare_alloc_pages+0x377/0x500 [ 2969.341275] ? lock_is_held_type+0x9f/0x120 [ 2969.341580] __alloc_pages+0x430/0x510 [ 2969.341852] ? __lock_acquire+0xbd4/0x63b0 [ 2969.342162] ? __pfx___alloc_pages+0x10/0x10 [ 2969.342482] ? mark_lock.part.0+0xef/0x2f30 [ 2969.342776] ? __pfx___lock_acquire+0x10/0x10 [ 2969.343096] vma_alloc_folio+0xe2/0x440 [ 2969.343374] __handle_mm_fault+0xfde/0x31c0 [ 2969.343662] ? lock_acquire.part.0+0xec/0x320 [ 2969.343987] ? lock_is_held_type+0x9f/0x120 [ 2969.344285] ? __pfx___handle_mm_fault+0x10/0x10 [ 2969.344631] handle_mm_fault+0x1b8/0x860 [ 2969.344913] __get_user_pages+0x4d6/0x1060 [ 2969.345220] ? __pfx___get_user_pages+0x10/0x10 [ 2969.345546] ? __pfx_mt_find+0x10/0x10 [ 2969.345821] populate_vma_page_range+0x2e7/0x420 [ 2969.346154] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2969.346530] ? __pfx_find_vma_intersection+0x10/0x10 [ 2969.346906] ? lock_acquire+0x32/0xc0 [ 2969.347197] ? __mm_populate+0x228/0x3a0 [ 2969.347501] __mm_populate+0x102/0x3a0 [ 2969.347786] ? __pfx___mm_populate+0x10/0x10 [ 2969.348126] ? up_write+0x196/0x510 [ 2969.348394] __do_sys_mlockall+0x414/0x4a0 [ 2969.348700] do_syscall_64+0x3f/0x90 [ 2969.348981] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2969.349355] RIP: 0033:0x7fd7734ddb19 [ 2969.349623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2969.350873] RSP: 002b:00007fd770a53188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2969.351420] RAX: ffffffffffffffda RBX: 00007fd7735f0f60 RCX: 00007fd7734ddb19 [ 2969.351923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2969.352414] RBP: 00007fd773537f6d R08: 0000000000000000 R09: 0000000000000000 [ 2969.352916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2969.353406] R13: 00007ffc98b57bcf R14: 00007fd770a53300 R15: 0000000000022000 [ 2969.353932] [ 2969.354185] Mem-Info: [ 2969.354370] active_anon:3259 inactive_anon:259024 isolated_anon:0 [ 2969.354370] active_file:20 inactive_file:10 isolated_file:0 [ 2969.354370] unevictable:8611 dirty:0 writeback:0 [ 2969.354370] slab_reclaimable:7474 slab_unreclaimable:53328 [ 2969.354370] mapped:69876 shmem:112 pagetables:4301 [ 2969.354370] sec_pagetables:0 bounce:0 [ 2969.354370] kernel_misc_reclaimable:0 [ 2969.354370] free:3111 free_pcp:32 free_cma:0 [ 2969.357011] Node 0 active_anon:13036kB inactive_anon:1036096kB active_file:80kB inactive_file:40kB unevictable:34444kB isolated(anon):0kB isolated(file):0kB mapped:279504kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7168kB pagetables:17204kB sec_pagetables:0kB all_unreclaimable? yes [ 2969.359412] Node 0 DMA free:6468kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:6880kB active_file:20kB inactive_file:8kB unevictable:548kB writepending:0kB present:15992kB managed:15360kB mlocked:548kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2969.361372] lowmem_reserve[]: 0 1606 1606 1606 [ 2969.361730] Node 0 DMA32 free:5976kB boost:2048kB min:7152kB low:8796kB high:10440kB reserved_highatomic:4096KB active_anon:13036kB inactive_anon:1029216kB active_file:76kB inactive_file:80kB unevictable:33896kB writepending:0kB present:2080640kB managed:1655460kB mlocked:33896kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 2969.363750] lowmem_reserve[]: 0 0 0 0 [ 2969.364067] Node 0 DMA: 3*4kB (UM) 11*8kB (UM) 10*16kB (UME) 8*32kB (UM) 9*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6468kB [ 2969.365254] Node 0 DMA32: 110*4kB (UME) 120*8kB (UME) 40*16kB (UME) 47*32kB (MEH) 10*64kB (E) 6*128kB (ME) 2*256kB (MH) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 5976kB [ 2969.366414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2969.367022] 385 total pagecache pages [ 2969.367293] 0 pages in swap cache [ 2969.367540] Free swap = 0kB [ 2969.367761] Total swap = 0kB [ 2969.368016] 524158 pages RAM [ 2969.368237] 0 pages HighMem/MovableOnly [ 2969.368513] 106453 pages reserved [ 2969.368760] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=13122,uid=0 [ 2969.369817] Out of memory (oom_kill_allocating_task): Killed process 13117 (syz-executor.7) total-vm:93412kB, anon-rss:9384kB, file-rss:35584kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 16:39:46 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) fork() [ 2974.808350] syz-executor.5 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2974.809255] CPU: 0 PID: 13236 Comm: syz-executor.5 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2974.809819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2974.810387] Call Trace: [ 2974.810573] [ 2974.810741] dump_stack_lvl+0xc1/0xf0 [ 2974.811038] dump_header+0x10a/0xd50 [ 2974.811319] oom_kill_process+0x25d/0x600 [ 2974.811620] out_of_memory+0x1365/0x1660 [ 2974.811927] ? __pfx_out_of_memory+0x10/0x10 [ 2974.812262] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2974.812681] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2974.813118] ? lock_is_held_type+0x9f/0x120 [ 2974.813426] ? prepare_alloc_pages+0x377/0x500 [ 2974.813759] ? lock_is_held_type+0x9f/0x120 [ 2974.814057] __alloc_pages+0x430/0x510 [ 2974.814341] ? __lock_acquire+0xbd4/0x63b0 [ 2974.814648] ? __pfx___alloc_pages+0x10/0x10 [ 2974.814978] ? mark_lock.part.0+0xef/0x2f30 [ 2974.815280] ? __pfx___lock_acquire+0x10/0x10 [ 2974.815622] vma_alloc_folio+0xe2/0x440 [ 2974.815901] __handle_mm_fault+0xfde/0x31c0 [ 2974.816214] ? lock_acquire.part.0+0xec/0x320 [ 2974.816548] ? lock_is_held_type+0x9f/0x120 [ 2974.816847] ? __pfx___handle_mm_fault+0x10/0x10 [ 2974.817204] handle_mm_fault+0x1b8/0x860 [ 2974.817481] __get_user_pages+0x4d6/0x1060 [ 2974.817798] ? __pfx___get_user_pages+0x10/0x10 [ 2974.818118] ? __pfx_mt_find+0x10/0x10 [ 2974.818413] populate_vma_page_range+0x2e7/0x420 [ 2974.818742] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2974.819126] ? __pfx_find_vma_intersection+0x10/0x10 [ 2974.819480] ? lock_acquire+0x32/0xc0 [ 2974.819769] ? __mm_populate+0x228/0x3a0 [ 2974.820078] __mm_populate+0x102/0x3a0 [ 2974.820373] ? __pfx___mm_populate+0x10/0x10 [ 2974.820706] ? up_write+0x196/0x510 [ 2974.820981] __do_sys_mlockall+0x414/0x4a0 [ 2974.821290] do_syscall_64+0x3f/0x90 [ 2974.821577] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2974.821961] RIP: 0033:0x7fdcd2862b19 [ 2974.822227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2974.823478] RSP: 002b:00007fdccfdd8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2974.824027] RAX: ffffffffffffffda RBX: 00007fdcd2975f60 RCX: 00007fdcd2862b19 [ 2974.824536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2974.825036] RBP: 00007fdcd28bcf6d R08: 0000000000000000 R09: 0000000000000000 [ 2974.825538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2974.826041] R13: 00007ffedf7a275f R14: 00007fdccfdd8300 R15: 0000000000022000 [ 2974.826549] [ 2974.826818] Mem-Info: [ 2974.827001] active_anon:3259 inactive_anon:263663 isolated_anon:0 [ 2974.827001] active_file:26 inactive_file:12 isolated_file:0 [ 2974.827001] unevictable:3636 dirty:0 writeback:0 [ 2974.827001] slab_reclaimable:7474 slab_unreclaimable:53363 [ 2974.827001] mapped:69829 shmem:112 pagetables:4312 [ 2974.827001] sec_pagetables:0 bounce:0 [ 2974.827001] kernel_misc_reclaimable:0 [ 2974.827001] free:3309 free_pcp:8 free_cma:0 [ 2974.829557] Node 0 active_anon:13036kB inactive_anon:1054652kB active_file:104kB inactive_file:48kB unevictable:14544kB isolated(anon):0kB isolated(file):0kB mapped:279316kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7168kB pagetables:17248kB sec_pagetables:0kB all_unreclaimable? yes [ 2974.831389] Node 0 DMA free:6468kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7252kB active_file:4kB inactive_file:4kB unevictable:148kB writepending:0kB present:15992kB managed:15360kB mlocked:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2974.833191] lowmem_reserve[]: 0 1606 1606 1606 [ 2974.833545] Node 0 DMA32 free:6768kB boost:0kB min:5104kB low:6748kB high:8392kB reserved_highatomic:2048KB active_anon:13036kB inactive_anon:1047400kB active_file:76kB inactive_file:68kB unevictable:14404kB writepending:0kB present:2080640kB managed:1655460kB mlocked:14404kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 2974.835496] lowmem_reserve[]: 0 0 0 0 [ 2974.835809] Node 0 DMA: 5*4kB (UME) 14*8kB (UME) 8*16kB (UM) 8*32kB (UME) 9*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6468kB [ 2974.837005] Node 0 DMA32: 81*4kB (UME) 50*8kB (UME) 23*16kB (ME) 70*32kB (ME) 36*64kB (ME) 12*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7172kB [ 2974.838106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2974.838691] 342 total pagecache pages [ 2974.838978] 0 pages in swap cache [ 2974.839223] Free swap = 0kB [ 2974.839449] Total swap = 0kB [ 2974.839668] 524158 pages RAM [ 2974.839902] 0 pages HighMem/MovableOnly [ 2974.840184] 106453 pages reserved [ 2974.840435] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=13236,uid=0 [ 2974.841412] Out of memory (oom_kill_allocating_task): Killed process 13235 (syz-executor.5) total-vm:93412kB, anon-rss:13736kB, file-rss:35456kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 16:39:50 executing program 3: mlockall(0x0) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:39:51 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:39:51 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) fork() [ 2975.542938] syz-executor.5 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2975.543767] CPU: 0 PID: 13240 Comm: syz-executor.5 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2975.544326] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2975.544876] Call Trace: [ 2975.545056] [ 2975.545216] dump_stack_lvl+0xc1/0xf0 [ 2975.545506] dump_header+0x10a/0xd50 [ 2975.545779] oom_kill_process+0x25d/0x600 [ 2975.546072] out_of_memory+0x1365/0x1660 [ 2975.546361] ? __pfx_out_of_memory+0x10/0x10 [ 2975.546677] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2975.547108] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2975.547528] ? lock_is_held_type+0x9f/0x120 [ 2975.547839] ? prepare_alloc_pages+0x377/0x500 [ 2975.548165] ? lock_is_held_type+0x9f/0x120 [ 2975.548461] __alloc_pages+0x430/0x510 [ 2975.548735] ? __lock_acquire+0xbd4/0x63b0 [ 2975.549045] ? __pfx___alloc_pages+0x10/0x10 [ 2975.549369] ? mark_lock.part.0+0xef/0x2f30 [ 2975.549682] ? __pfx___lock_acquire+0x10/0x10 [ 2975.550010] vma_alloc_folio+0xe2/0x440 [ 2975.550294] __handle_mm_fault+0xfde/0x31c0 [ 2975.550590] ? lock_acquire.part.0+0xec/0x320 [ 2975.550906] ? lock_is_held_type+0x9f/0x120 [ 2975.551211] ? __pfx___handle_mm_fault+0x10/0x10 [ 2975.551555] handle_mm_fault+0x1b8/0x860 [ 2975.551846] __get_user_pages+0x4d6/0x1060 [ 2975.552164] ? __pfx___get_user_pages+0x10/0x10 [ 2975.552489] ? __pfx_mt_find+0x10/0x10 [ 2975.552768] populate_vma_page_range+0x2e7/0x420 [ 2975.553106] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2975.553464] ? __pfx_find_vma_intersection+0x10/0x10 [ 2975.553822] ? lock_acquire+0x32/0xc0 [ 2975.554106] ? __mm_populate+0x228/0x3a0 [ 2975.554412] __mm_populate+0x102/0x3a0 [ 2975.554704] ? __pfx___mm_populate+0x10/0x10 [ 2975.555029] ? up_write+0x196/0x510 [ 2975.555308] __do_sys_mlockall+0x414/0x4a0 [ 2975.555600] do_syscall_64+0x3f/0x90 [ 2975.555886] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2975.556260] RIP: 0033:0x7fdcd2862b19 [ 2975.556530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2975.557777] RSP: 002b:00007fdccfdd8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2975.558307] RAX: ffffffffffffffda RBX: 00007fdcd2975f60 RCX: 00007fdcd2862b19 [ 2975.558802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2975.559302] RBP: 00007fdcd28bcf6d R08: 0000000000000000 R09: 0000000000000000 [ 2975.559801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2975.560309] R13: 00007ffedf7a275f R14: 00007fdccfdd8300 R15: 0000000000022000 [ 2975.560837] [ 2975.561081] Mem-Info: [ 2975.561263] active_anon:3259 inactive_anon:263663 isolated_anon:0 [ 2975.561263] active_file:9 inactive_file:16 isolated_file:0 [ 2975.561263] unevictable:3778 dirty:0 writeback:0 [ 2975.561263] slab_reclaimable:7473 slab_unreclaimable:53292 [ 2975.561263] mapped:69801 shmem:112 pagetables:4316 [ 2975.561263] sec_pagetables:0 bounce:0 [ 2975.561263] kernel_misc_reclaimable:0 [ 2975.561263] free:3316 free_pcp:24 free_cma:0 [ 2975.563834] Node 0 active_anon:13036kB inactive_anon:1054652kB active_file:36kB inactive_file:64kB unevictable:15112kB isolated(anon):0kB isolated(file):0kB mapped:279204kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7168kB pagetables:17264kB sec_pagetables:0kB all_unreclaimable? yes [ 2975.565652] Node 0 DMA free:6468kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7252kB active_file:0kB inactive_file:4kB unevictable:148kB writepending:0kB present:15992kB managed:15360kB mlocked:148kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2975.567423] lowmem_reserve[]: 0 1606 1606 1606 [ 2975.567774] Node 0 DMA32 free:6796kB boost:0kB min:5104kB low:6748kB high:8392kB reserved_highatomic:2048KB active_anon:13036kB inactive_anon:1047400kB active_file:48kB inactive_file:12kB unevictable:14964kB writepending:0kB present:2080640kB managed:1655460kB mlocked:14964kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 2975.569750] lowmem_reserve[]: 0 0 0 0 [ 2975.570060] Node 0 DMA: 5*4kB (UME) 14*8kB (UME) 8*16kB (UM) 8*32kB (UME) 9*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6468kB [ 2975.571265] Node 0 DMA32: 44*4kB (UME) 53*8kB (UME) 21*16kB (UME) 67*32kB (ME) 35*64kB (ME) 10*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6856kB [ 2975.572417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2975.573028] 320 total pagecache pages [ 2975.573297] 0 pages in swap cache [ 2975.573551] Free swap = 0kB [ 2975.573768] Total swap = 0kB [ 2975.574003] 524158 pages RAM [ 2975.574232] 0 pages HighMem/MovableOnly [ 2975.574508] 106453 pages reserved [ 2975.574764] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=13240,uid=0 [ 2975.575809] Out of memory (oom_kill_allocating_task): Killed process 13237 (syz-executor.5) total-vm:93412kB, anon-rss:14248kB, file-rss:35456kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 16:39:51 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), 0x0, &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:39:52 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) fork() 16:39:52 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), 0x0, {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:39:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x0, 0xfc8d, 0x3f, 0x6, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:39:52 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0xfc8d, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:39:52 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) [ 2976.695524] syz-executor.5 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2976.697219] CPU: 0 PID: 13247 Comm: syz-executor.5 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2976.698301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.699352] Call Trace: [ 2976.699699] [ 2976.700036] dump_stack_lvl+0xc1/0xf0 [ 2976.700578] dump_header+0x10a/0xd50 [ 2976.701097] oom_kill_process+0x25d/0x600 [ 2976.701657] out_of_memory+0x1365/0x1660 [ 2976.702231] ? __pfx_out_of_memory+0x10/0x10 [ 2976.702930] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2976.703736] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2976.704560] ? lock_is_held_type+0x9f/0x120 [ 2976.705191] ? prepare_alloc_pages+0x377/0x500 [ 2976.705810] ? lock_is_held_type+0x9f/0x120 [ 2976.706421] __alloc_pages+0x430/0x510 [ 2976.706950] ? __lock_acquire+0xbd4/0x63b0 [ 2976.707537] ? __pfx___alloc_pages+0x10/0x10 [ 2976.708156] ? mark_lock.part.0+0xef/0x2f30 [ 2976.708749] ? __pfx___lock_acquire+0x10/0x10 [ 2976.709373] vma_alloc_folio+0xe2/0x440 [ 2976.709915] __handle_mm_fault+0xfde/0x31c0 [ 2976.710485] ? lock_acquire.part.0+0xec/0x320 [ 2976.711103] ? lock_is_held_type+0x9f/0x120 [ 2976.711684] ? __pfx___handle_mm_fault+0x10/0x10 [ 2976.712379] handle_mm_fault+0x1b8/0x860 [ 2976.712932] __get_user_pages+0x4d6/0x1060 [ 2976.713524] ? __pfx___get_user_pages+0x10/0x10 [ 2976.714151] ? __pfx_mt_find+0x10/0x10 [ 2976.714699] populate_vma_page_range+0x2e7/0x420 [ 2976.715347] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2976.716044] ? __pfx_find_vma_intersection+0x10/0x10 [ 2976.716741] ? lock_acquire+0x32/0xc0 [ 2976.717270] ? __mm_populate+0x228/0x3a0 [ 2976.717832] __mm_populate+0x102/0x3a0 [ 2976.718391] ? __pfx___mm_populate+0x10/0x10 [ 2976.718996] ? up_write+0x196/0x510 [ 2976.719503] __do_sys_mlockall+0x414/0x4a0 [ 2976.720088] do_syscall_64+0x3f/0x90 [ 2976.720607] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2976.721314] RIP: 0033:0x7fdcd2862b19 [ 2976.721811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.724077] RSP: 002b:00007fdccfdd8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2976.725058] RAX: ffffffffffffffda RBX: 00007fdcd2975f60 RCX: 00007fdcd2862b19 [ 2976.725976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2976.726891] RBP: 00007fdcd28bcf6d R08: 0000000000000000 R09: 0000000000000000 [ 2976.727798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2976.728735] R13: 00007ffedf7a275f R14: 00007fdccfdd8300 R15: 0000000000022000 [ 2976.729674] [ 2976.731598] Mem-Info: [ 2976.732226] active_anon:3259 inactive_anon:263511 isolated_anon:0 [ 2976.732226] active_file:12 inactive_file:23 isolated_file:2 [ 2976.732226] unevictable:3941 dirty:0 writeback:0 [ 2976.732226] slab_reclaimable:7475 slab_unreclaimable:53134 [ 2976.732226] mapped:69856 shmem:112 pagetables:4408 [ 2976.732226] sec_pagetables:0 bounce:0 [ 2976.732226] kernel_misc_reclaimable:0 [ 2976.732226] free:3316 free_pcp:0 free_cma:0 [ 2976.736955] Node 0 active_anon:13036kB inactive_anon:1054044kB active_file:48kB inactive_file:92kB unevictable:15764kB isolated(anon):0kB isolated(file):8kB mapped:279424kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7360kB pagetables:17632kB sec_pagetables:0kB all_unreclaimable? yes [ 2976.740329] Node 0 DMA free:6452kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7256kB active_file:8kB inactive_file:0kB unevictable:204kB writepending:0kB present:15992kB managed:15360kB mlocked:204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2976.743604] lowmem_reserve[]: 0 1606 1606 1606 [ 2976.744300] Node 0 DMA32 free:6896kB boost:0kB min:5104kB low:6748kB high:8392kB reserved_highatomic:2048KB active_anon:13036kB inactive_anon:1046788kB active_file:40kB inactive_file:92kB unevictable:15560kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15560kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2976.748024] lowmem_reserve[]: 0 0 0 0 [ 2976.748593] Node 0 DMA: 1*4kB (E) 6*8kB (ME) 8*16kB (UM) 10*32kB (UME) 9*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6452kB [ 2976.750823] Node 0 DMA32: 45*4kB (UME) 48*8kB (UME) 20*16kB (UME) 68*32kB (UME) 38*64kB (UME) 5*128kB (UM) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 6900kB [ 2976.753078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2976.754192] 373 total pagecache pages [ 2976.754710] 0 pages in swap cache [ 2976.755200] Free swap = 0kB [ 2976.755623] Total swap = 0kB [ 2976.756084] 524158 pages RAM [ 2976.756506] 0 pages HighMem/MovableOnly [ 2976.757051] 106453 pages reserved [ 2976.757524] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=13247,uid=0 [ 2976.759455] Out of memory (oom_kill_allocating_task): Killed process 13246 (syz-executor.5) total-vm:93412kB, anon-rss:3112kB, file-rss:35456kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 2976.772540] syz-executor.6 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2976.773448] CPU: 1 PID: 13249 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2976.773996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.774531] Call Trace: [ 2976.774707] [ 2976.774867] dump_stack_lvl+0xc1/0xf0 [ 2976.775150] dump_header+0x10a/0xd50 [ 2976.775416] oom_kill_process+0x25d/0x600 [ 2976.775705] out_of_memory+0x1365/0x1660 [ 2976.776000] ? __pfx_out_of_memory+0x10/0x10 [ 2976.776313] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2976.776725] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2976.777147] ? lock_is_held_type+0x9f/0x120 [ 2976.777454] ? prepare_alloc_pages+0x377/0x500 [ 2976.777771] ? lock_is_held_type+0x9f/0x120 [ 2976.778077] __alloc_pages+0x430/0x510 [ 2976.778347] ? __lock_acquire+0xbd4/0x63b0 [ 2976.778643] ? __pfx___alloc_pages+0x10/0x10 [ 2976.778958] ? mark_lock.part.0+0xef/0x2f30 [ 2976.779260] ? __pfx___lock_acquire+0x10/0x10 [ 2976.779579] vma_alloc_folio+0xe2/0x440 [ 2976.779868] __handle_mm_fault+0xfde/0x31c0 [ 2976.780178] ? lock_acquire.part.0+0xec/0x320 [ 2976.780491] ? lock_is_held_type+0x9f/0x120 [ 2976.780792] ? __pfx___handle_mm_fault+0x10/0x10 [ 2976.781133] handle_mm_fault+0x1b8/0x860 [ 2976.781421] __get_user_pages+0x4d6/0x1060 [ 2976.781724] ? __pfx___get_user_pages+0x10/0x10 [ 2976.782050] ? __pfx_mt_find+0x10/0x10 [ 2976.782330] populate_vma_page_range+0x2e7/0x420 [ 2976.782657] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2976.783017] ? __pfx_find_vma_intersection+0x10/0x10 [ 2976.783368] ? lock_acquire+0x32/0xc0 [ 2976.783641] ? __mm_populate+0x228/0x3a0 [ 2976.783932] __mm_populate+0x102/0x3a0 [ 2976.784214] ? __pfx___mm_populate+0x10/0x10 [ 2976.784524] ? up_write+0x196/0x510 [ 2976.784781] __do_sys_mlockall+0x414/0x4a0 [ 2976.785076] do_syscall_64+0x3f/0x90 [ 2976.785347] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2976.785704] RIP: 0033:0x7fd09934cb19 [ 2976.785964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.787132] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2976.787636] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2976.788116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2976.788586] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2976.789065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2976.789543] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2976.790036] [ 2976.790259] Mem-Info: [ 2976.790438] active_anon:3259 inactive_anon:263511 isolated_anon:0 [ 2976.790438] active_file:12 inactive_file:2 isolated_file:2 [ 2976.790438] unevictable:3941 dirty:0 writeback:0 [ 2976.790438] slab_reclaimable:7475 slab_unreclaimable:53134 [ 2976.790438] mapped:69856 shmem:112 pagetables:4408 [ 2976.790438] sec_pagetables:0 bounce:0 [ 2976.790438] kernel_misc_reclaimable:0 [ 2976.790438] free:3337 free_pcp:158 free_cma:0 [ 2976.792935] Node 0 active_anon:13036kB inactive_anon:1054044kB active_file:48kB inactive_file:92kB unevictable:15764kB isolated(anon):0kB isolated(file):8kB mapped:279424kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7360kB pagetables:17632kB sec_pagetables:0kB all_unreclaimable? no [ 2976.794689] Node 0 DMA free:6452kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7256kB active_file:0kB inactive_file:8kB unevictable:204kB writepending:0kB present:15992kB managed:15360kB mlocked:204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2976.796497] lowmem_reserve[]: 0 1606 1606 1606 [ 2976.796862] Node 0 DMA32 free:6168kB boost:2048kB min:7152kB low:8796kB high:10440kB reserved_highatomic:6144KB active_anon:13036kB inactive_anon:1046788kB active_file:40kB inactive_file:92kB unevictable:15560kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15560kB bounce:0kB free_pcp:880kB local_pcp:192kB free_cma:0kB [ 2976.798881] lowmem_reserve[]: 0 0 0 0 [ 2976.799170] Node 0 DMA: 1*4kB (E) 6*8kB (ME) 8*16kB (UM) 10*32kB (UME) 9*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6452kB [ 2976.800348] Node 0 DMA32: 5*4kB (UME) 35*8kB (ME) 19*16kB (MEH) 65*32kB (UMEH) 35*64kB (MEH) 2*128kB (UH) 1*256kB (H) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 5948kB [ 2976.801508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2976.802085] 373 total pagecache pages [ 2976.802352] 0 pages in swap cache [ 2976.802603] Free swap = 0kB [ 2976.802834] Total swap = 0kB [ 2976.803053] 524158 pages RAM [ 2976.803269] 0 pages HighMem/MovableOnly [ 2976.803546] 106453 pages reserved [ 2976.803807] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz6,mems_allowed=0,global_oom,task_memcg=/syz6,task=syz-executor.6,pid=13249,uid=0 [ 2976.804842] Out of memory (oom_kill_allocating_task): Killed process 13248 (syz-executor.6) total-vm:93412kB, anon-rss:8616kB, file-rss:35456kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 2977.810944] syz-executor.7 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2977.812280] CPU: 0 PID: 13250 Comm: syz-executor.7 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2977.813101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2977.813908] Call Trace: [ 2977.814187] [ 2977.814428] dump_stack_lvl+0xc1/0xf0 [ 2977.814857] dump_header+0x10a/0xd50 [ 2977.815258] oom_kill_process+0x25d/0x600 [ 2977.815708] out_of_memory+0x1365/0x1660 [ 2977.816150] ? __pfx_out_of_memory+0x10/0x10 [ 2977.816646] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2977.817268] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2977.817907] ? lock_is_held_type+0x9f/0x120 [ 2977.818375] ? prepare_alloc_pages+0x377/0x500 [ 2977.818868] ? lock_is_held_type+0x9f/0x120 [ 2977.819330] __alloc_pages+0x430/0x510 [ 2977.819760] ? __lock_acquire+0xbd4/0x63b0 [ 2977.820233] ? __pfx___alloc_pages+0x10/0x10 [ 2977.820715] ? mark_lock.part.0+0xef/0x2f30 [ 2977.821171] ? __pfx___lock_acquire+0x10/0x10 [ 2977.821652] vma_alloc_folio+0xe2/0x440 [ 2977.822090] __handle_mm_fault+0xfde/0x31c0 [ 2977.822532] ? lock_acquire.part.0+0xec/0x320 [ 2977.823016] ? lock_is_held_type+0x9f/0x120 [ 2977.823472] ? __pfx___handle_mm_fault+0x10/0x10 [ 2977.824006] handle_mm_fault+0x1b8/0x860 [ 2977.824453] __get_user_pages+0x4d6/0x1060 [ 2977.824906] ? __pfx___get_user_pages+0x10/0x10 [ 2977.825410] ? __pfx_mt_find+0x10/0x10 [ 2977.825834] populate_vma_page_range+0x2e7/0x420 [ 2977.826351] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2977.826895] ? __pfx_find_vma_intersection+0x10/0x10 [ 2977.827440] ? lock_acquire+0x32/0xc0 [ 2977.827852] ? __mm_populate+0x228/0x3a0 [ 2977.828308] __mm_populate+0x102/0x3a0 [ 2977.828724] ? __pfx___mm_populate+0x10/0x10 [ 2977.829219] ? up_write+0x196/0x510 [ 2977.829604] __do_sys_mlockall+0x414/0x4a0 [ 2977.830057] do_syscall_64+0x3f/0x90 [ 2977.830457] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2977.831007] RIP: 0033:0x7fd7734ddb19 [ 2977.831392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2977.833218] RSP: 002b:00007fd770a53188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2977.833986] RAX: ffffffffffffffda RBX: 00007fd7735f0f60 RCX: 00007fd7734ddb19 [ 2977.834730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2977.835463] RBP: 00007fd773537f6d R08: 0000000000000000 R09: 0000000000000000 [ 2977.836203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2977.836938] R13: 00007ffc98b57bcf R14: 00007fd770a53300 R15: 0000000000022000 [ 2977.837683] [ 2977.838044] Mem-Info: [ 2977.838315] active_anon:3259 inactive_anon:263663 isolated_anon:0 [ 2977.838315] active_file:0 inactive_file:29 isolated_file:0 [ 2977.838315] unevictable:3925 dirty:0 writeback:0 [ 2977.838315] slab_reclaimable:7476 slab_unreclaimable:53123 [ 2977.838315] mapped:69806 shmem:112 pagetables:4316 [ 2977.838315] sec_pagetables:0 bounce:0 [ 2977.838315] kernel_misc_reclaimable:0 [ 2977.838315] free:3369 free_pcp:34 free_cma:0 [ 2977.842001] Node 0 active_anon:13036kB inactive_anon:1054652kB active_file:0kB inactive_file:116kB unevictable:15700kB isolated(anon):0kB isolated(file):0kB mapped:279224kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7168kB pagetables:17264kB sec_pagetables:0kB all_unreclaimable? yes [ 2977.844681] Node 0 DMA free:6468kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7252kB active_file:0kB inactive_file:8kB unevictable:244kB writepending:0kB present:15992kB managed:15360kB mlocked:244kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2977.847331] lowmem_reserve[]: 0 1606 1606 1606 [ 2977.847897] Node 0 DMA32 free:7008kB boost:0kB min:5104kB low:6748kB high:8392kB reserved_highatomic:2048KB active_anon:13036kB inactive_anon:1047400kB active_file:4kB inactive_file:128kB unevictable:15220kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15220kB bounce:0kB free_pcp:136kB local_pcp:136kB free_cma:0kB [ 2977.850813] lowmem_reserve[]: 0 0 0 0 [ 2977.851261] Node 0 DMA: 7*4kB (UME) 3*8kB (UME) 7*16kB (UM) 11*32kB (UME) 9*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6468kB [ 2977.853040] Node 0 DMA32: 30*4kB (UME) 56*8kB (ME) 32*16kB (ME) 62*32kB (UME) 36*64kB (ME) 5*128kB (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 6776kB [ 2977.854745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2977.855623] 328 total pagecache pages [ 2977.856046] 0 pages in swap cache [ 2977.857233] Free swap = 0kB [ 2977.857777] Total swap = 0kB [ 2977.858139] 524158 pages RAM [ 2977.858464] 0 pages HighMem/MovableOnly [ 2977.858896] 106453 pages reserved [ 2977.859262] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=13250,uid=0 [ 2977.861102] Out of memory (oom_kill_allocating_task): Killed process 13245 (syz-executor.7) total-vm:93412kB, anon-rss:14888kB, file-rss:35456kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 2993.340967] syz-executor.4 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=3, oom_score_adj=1000 [ 2993.341850] CPU: 1 PID: 13278 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2993.342386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2993.342935] Call Trace: [ 2993.343114] [ 2993.343275] dump_stack_lvl+0xc1/0xf0 [ 2993.343553] dump_header+0x10a/0xd50 [ 2993.343821] oom_kill_process+0x25d/0x600 [ 2993.344114] out_of_memory+0x1365/0x1660 [ 2993.344407] ? __pfx_out_of_memory+0x10/0x10 [ 2993.344722] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2993.345136] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2993.345561] ? prepare_alloc_pages+0x377/0x500 [ 2993.345882] ? __create_object+0x3ee/0xc90 [ 2993.346184] __alloc_pages+0x430/0x510 [ 2993.346461] ? __pfx___alloc_pages+0x10/0x10 [ 2993.346765] ? lock_release+0x1e3/0x710 [ 2993.347065] __kmalloc_large_node+0xb1/0x1a0 [ 2993.347370] ? io_alloc_hash_table+0x2e/0xc0 [ 2993.347675] __kmalloc+0x8d/0xc0 [ 2993.347915] io_alloc_hash_table+0x2e/0xc0 [ 2993.348223] io_uring_setup+0x313/0x21e0 [ 2993.348509] ? xfd_validate_state+0x51/0x170 [ 2993.348821] ? __pfx_io_uring_setup+0x10/0x10 [ 2993.349151] do_syscall_64+0x3f/0x90 [ 2993.349421] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2993.349781] RIP: 0033:0x7ff90dfe0b19 [ 2993.350033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.351190] RSP: 002b:00007ff90b556188 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2993.351686] RAX: ffffffffffffffda RBX: 00007ff90e0f3f60 RCX: 00007ff90dfe0b19 [ 2993.352152] RDX: 0000000000000000 RSI: 0000000020000c80 RDI: 000000000000600f [ 2993.352652] RBP: 00007ff90e03af6d R08: 0000000000000000 R09: 0000000000000000 [ 2993.353161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2993.353661] R13: 00007fffebfed22f R14: 00007ff90b556300 R15: 0000000000022000 [ 2993.354173] [ 2993.354413] Mem-Info: [ 2993.354600] active_anon:3259 inactive_anon:263096 isolated_anon:0 [ 2993.354600] active_file:12 inactive_file:25 isolated_file:0 [ 2993.354600] unevictable:3945 dirty:0 writeback:0 [ 2993.354600] slab_reclaimable:7518 slab_unreclaimable:53328 [ 2993.354600] mapped:69867 shmem:112 pagetables:4415 [ 2993.354600] sec_pagetables:0 bounce:0 [ 2993.354600] kernel_misc_reclaimable:0 [ 2993.354600] free:3461 free_pcp:0 free_cma:0 [ 2993.357170] Node 0 active_anon:13036kB inactive_anon:1052384kB active_file:48kB inactive_file:100kB unevictable:15780kB isolated(anon):0kB isolated(file):0kB mapped:279468kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7456kB pagetables:17660kB sec_pagetables:0kB all_unreclaimable? no [ 2993.359044] Node 0 DMA free:6468kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7220kB active_file:16kB inactive_file:0kB unevictable:136kB writepending:0kB present:15992kB managed:15360kB mlocked:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2993.360886] lowmem_reserve[]: 0 1606 1606 1606 [ 2993.361241] Node 0 DMA32 free:7376kB boost:2048kB min:7152kB low:8796kB high:10440kB reserved_highatomic:2048KB active_anon:13036kB inactive_anon:1045164kB active_file:268kB inactive_file:12kB unevictable:15056kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15056kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2993.363243] lowmem_reserve[]: 0 0 0 0 [ 2993.363540] Node 0 DMA: 12*4kB (UME) 21*8kB (UM) 15*16kB (UM) 8*32kB (UME) 6*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6472kB [ 2993.364825] Node 0 DMA32: 59*4kB (UME) 63*8kB (UME) 75*16kB (UME) 113*32kB (UME) 20*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 7220kB [ 2993.365947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2993.366536] 382 total pagecache pages [ 2993.366826] 0 pages in swap cache [ 2993.367150] Free swap = 0kB [ 2993.367424] Total swap = 0kB [ 2993.367701] 524158 pages RAM [ 2993.368006] 0 pages HighMem/MovableOnly [ 2993.368342] 106453 pages reserved [ 2993.368663] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0,global_oom,task_memcg=/syz4,task=syz-executor.4,pid=13278,uid=0 [ 2993.370469] Out of memory (oom_kill_allocating_task): Killed process 13273 (syz-executor.4) total-vm:93544kB, anon-rss:424kB, file-rss:35584kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 2995.274798] syz-fuzzer invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 2995.275568] CPU: 1 PID: 238 Comm: syz-fuzzer Not tainted 6.2.0-rc8-next-20230217 #1 [ 2995.276083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.276632] Call Trace: [ 2995.276816] [ 2995.276976] dump_stack_lvl+0xc1/0xf0 [ 2995.277252] dump_header+0x10a/0xd50 [ 2995.277519] oom_kill_process+0x25d/0x600 [ 2995.277810] out_of_memory+0x1365/0x1660 [ 2995.278106] ? __pfx_out_of_memory+0x10/0x10 [ 2995.278425] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2995.278847] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2995.279264] ? lock_is_held_type+0x9f/0x120 [ 2995.279581] ? prepare_alloc_pages+0x377/0x500 [ 2995.279903] __alloc_pages+0x430/0x510 [ 2995.280187] ? __pfx___alloc_pages+0x10/0x10 [ 2995.280494] ? __alloc_pages+0x43d/0x510 [ 2995.280781] ? __lock_acquire+0x1936/0x63b0 [ 2995.281097] alloc_pages+0x1a0/0x260 [ 2995.281364] filemap_alloc_folio+0x374/0x410 [ 2995.281668] ? __pfx_lock_release+0x10/0x10 [ 2995.281976] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 2995.282316] ? xas_load+0x6a/0x140 [ 2995.282580] __filemap_get_folio+0x32b/0xcd0 [ 2995.282895] ? __pfx___filemap_get_folio+0x10/0x10 [ 2995.283231] ? filemap_fault+0x1444/0x2120 [ 2995.283529] ? filemap_fault+0x1444/0x2120 [ 2995.283817] ? lock_acquire+0x32/0xc0 [ 2995.284102] ? filemap_fault+0x1444/0x2120 [ 2995.284407] filemap_fault+0x1484/0x2120 [ 2995.284711] ? __pfx_filemap_fault+0x10/0x10 [ 2995.285045] ? __pfx_filemap_map_pages+0x10/0x10 [ 2995.285385] __do_fault+0x10d/0x590 [ 2995.285652] ? __pfx_filemap_map_pages+0x10/0x10 [ 2995.285991] __handle_mm_fault+0x1287/0x31c0 [ 2995.286294] ? lock_is_held_type+0x9f/0x120 [ 2995.286606] ? __pfx___handle_mm_fault+0x10/0x10 [ 2995.286965] handle_mm_fault+0x1b8/0x860 [ 2995.287246] do_user_addr_fault+0x512/0x1320 [ 2995.287579] exc_page_fault+0x9c/0x1a0 [ 2995.287854] asm_exc_page_fault+0x26/0x30 [ 2995.288161] RIP: 0033:0x465f2d [ 2995.288404] Code: Unable to access opcode bytes at 0x465f03. [ 2995.288811] RSP: 002b:000000c00003ff18 EFLAGS: 00010212 [ 2995.289165] RAX: 0000000000000000 RBX: 0000000000004e20 RCX: 0000000000465f2d [ 2995.289657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000c00003ff18 [ 2995.290124] RBP: 000000c00003ff28 R08: 0000000000007c62 R09: 00007ffde8d3f080 [ 2995.290622] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000438880 [ 2995.291109] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 2995.291614] [ 2995.291854] Mem-Info: [ 2995.292035] active_anon:3259 inactive_anon:263090 isolated_anon:0 [ 2995.292035] active_file:26 inactive_file:18 isolated_file:0 [ 2995.292035] unevictable:4031 dirty:0 writeback:0 [ 2995.292035] slab_reclaimable:7518 slab_unreclaimable:53604 [ 2995.292035] mapped:69857 shmem:112 pagetables:4390 [ 2995.292035] sec_pagetables:0 bounce:0 [ 2995.292035] kernel_misc_reclaimable:0 [ 2995.292035] free:2979 free_pcp:206 free_cma:0 [ 2995.294553] Node 0 active_anon:13036kB inactive_anon:1052360kB active_file:104kB inactive_file:72kB unevictable:16124kB isolated(anon):0kB isolated(file):0kB mapped:279428kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7360kB pagetables:17560kB sec_pagetables:0kB all_unreclaimable? yes [ 2995.296379] Node 0 DMA free:6464kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7220kB active_file:8kB inactive_file:0kB unevictable:152kB writepending:0kB present:15992kB managed:15360kB mlocked:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2995.298059] lowmem_reserve[]: 0 1606 1606 1606 [ 2995.298407] Node 0 DMA32 free:5452kB boost:8192kB min:13296kB low:14940kB high:16584kB reserved_highatomic:18432KB active_anon:13036kB inactive_anon:1045140kB active_file:16kB inactive_file:56kB unevictable:15972kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15972kB bounce:0kB free_pcp:824kB local_pcp:344kB free_cma:0kB [ 2995.300427] lowmem_reserve[]: 0 0 0 0 [ 2995.300710] Node 0 DMA: 6*4kB (UME) 23*8kB (UM) 13*16kB (UM) 8*32kB (UME) 6*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6432kB [ 2995.301934] Node 0 DMA32: 55*4kB (UMEH) 20*8kB (MEH) 39*16kB (UMEH) 105*32kB (MEH) 15*64kB (UMH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5452kB [ 2995.302987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2995.303580] 368 total pagecache pages [ 2995.303867] 0 pages in swap cache [ 2995.304106] Free swap = 0kB [ 2995.304341] Total swap = 0kB [ 2995.304563] 524158 pages RAM [ 2995.304780] 0 pages HighMem/MovableOnly [ 2995.305080] 106453 pages reserved [ 2995.305324] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=238,uid=0 [ 2995.307290] Out of memory (oom_kill_allocating_task): Killed process 237 (syz-fuzzer) total-vm:963116kB, anon-rss:34432kB, file-rss:128kB, shmem-rss:0kB, UID:0 pgtables:372kB oom_score_adj:0 [ 2995.316697] syz-executor.3 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2995.317536] CPU: 1 PID: 13272 Comm: syz-executor.3 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2995.318105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.318676] Call Trace: [ 2995.318864] [ 2995.319031] dump_stack_lvl+0xc1/0xf0 [ 2995.319314] dump_header+0x10a/0xd50 [ 2995.319592] oom_kill_process+0x25d/0x600 [ 2995.319893] out_of_memory+0x1365/0x1660 [ 2995.320204] ? __pfx_out_of_memory+0x10/0x10 [ 2995.320530] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2995.320940] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2995.321377] ? lock_is_held_type+0x9f/0x120 [ 2995.321687] ? prepare_alloc_pages+0x377/0x500 [ 2995.322017] ? lock_is_held_type+0x9f/0x120 [ 2995.322322] __alloc_pages+0x430/0x510 [ 2995.322609] ? __lock_acquire+0xbd4/0x63b0 [ 2995.322922] ? __pfx___alloc_pages+0x10/0x10 [ 2995.323257] ? mark_lock.part.0+0xef/0x2f30 [ 2995.323558] ? __pfx___lock_acquire+0x10/0x10 [ 2995.323894] vma_alloc_folio+0xe2/0x440 [ 2995.324193] __handle_mm_fault+0xfde/0x31c0 [ 2995.324501] ? lock_acquire.part.0+0xec/0x320 [ 2995.324822] ? lock_is_held_type+0x9f/0x120 [ 2995.325142] ? __pfx___handle_mm_fault+0x10/0x10 [ 2995.325487] handle_mm_fault+0x1b8/0x860 [ 2995.325786] __get_user_pages+0x4d6/0x1060 [ 2995.326095] ? __pfx___get_user_pages+0x10/0x10 [ 2995.326423] ? __pfx_mt_find+0x10/0x10 [ 2995.326704] populate_vma_page_range+0x2e7/0x420 [ 2995.327041] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2995.327401] ? __pfx_find_vma_intersection+0x10/0x10 [ 2995.327748] ? lock_acquire+0x32/0xc0 [ 2995.328020] ? __mm_populate+0x228/0x3a0 [ 2995.328321] __mm_populate+0x102/0x3a0 [ 2995.328594] ? __pfx___mm_populate+0x10/0x10 [ 2995.328901] ? up_write+0x196/0x510 [ 2995.329162] __do_sys_mlockall+0x414/0x4a0 [ 2995.329456] do_syscall_64+0x3f/0x90 [ 2995.329723] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2995.330087] RIP: 0033:0x7f53d7cf0b19 [ 2995.330343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.331508] RSP: 002b:00007f53d5266188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2995.332007] RAX: ffffffffffffffda RBX: 00007f53d7e03f60 RCX: 00007f53d7cf0b19 [ 2995.332472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2995.332942] RBP: 00007f53d7d4af6d R08: 0000000000000000 R09: 0000000000000000 [ 2995.333434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2995.333939] R13: 00007ffc19cd855f R14: 00007f53d5266300 R15: 0000000000022000 [ 2995.334453] [ 2995.334693] Mem-Info: [ 2995.334892] active_anon:3259 inactive_anon:263090 isolated_anon:0 [ 2995.334892] active_file:26 inactive_file:0 isolated_file:0 [ 2995.334892] unevictable:4031 dirty:0 writeback:0 [ 2995.334892] slab_reclaimable:7518 slab_unreclaimable:53535 [ 2995.334892] mapped:69857 shmem:112 pagetables:4390 [ 2995.334892] sec_pagetables:0 bounce:0 [ 2995.334892] kernel_misc_reclaimable:0 [ 2995.334892] free:2974 free_pcp:293 free_cma:0 [ 2995.337559] Node 0 active_anon:13036kB inactive_anon:1052360kB active_file:104kB inactive_file:68kB unevictable:16124kB isolated(anon):0kB isolated(file):0kB mapped:279428kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7360kB pagetables:17560kB sec_pagetables:0kB all_unreclaimable? yes [ 2995.339421] Node 0 DMA free:6444kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7220kB active_file:28kB inactive_file:16kB unevictable:152kB writepending:0kB present:15992kB managed:15360kB mlocked:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2995.341253] lowmem_reserve[]: 0 1606 1606 1606 [ 2995.341609] Node 0 DMA32 free:5452kB boost:8192kB min:13296kB low:14940kB high:16584kB reserved_highatomic:18432KB active_anon:13036kB inactive_anon:1045140kB active_file:96kB inactive_file:0kB unevictable:15972kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15972kB bounce:0kB free_pcp:1204kB local_pcp:692kB free_cma:0kB [ 2995.343662] lowmem_reserve[]: 0 0 0 0 [ 2995.343978] Node 0 DMA: 5*4kB (UME) 23*8kB (UM) 13*16kB (UM) 8*32kB (UME) 6*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6428kB [ 2995.345206] Node 0 DMA32: 55*4kB (UMEH) 20*8kB (MEH) 39*16kB (UMEH) 105*32kB (MEH) 15*64kB (UMH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5452kB [ 2995.346328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2995.346971] 368 total pagecache pages [ 2995.347242] 0 pages in swap cache [ 2995.347487] Free swap = 0kB [ 2995.347708] Total swap = 0kB [ 2995.347949] 524158 pages RAM [ 2995.348169] 0 pages HighMem/MovableOnly [ 2995.348462] 106453 pages reserved [ 2995.348709] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=13272,uid=0 [ 2995.349736] Out of memory (oom_kill_allocating_task): Killed process 13270 (syz-executor.3) total-vm:93412kB, anon-rss:9896kB, file-rss:35456kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 2995.353595] syz-executor.2 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 2995.354377] CPU: 1 PID: 1723 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2995.354953] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.355523] Call Trace: [ 2995.355709] [ 2995.355875] dump_stack_lvl+0xc1/0xf0 [ 2995.356162] dump_header+0x10a/0xd50 [ 2995.356447] oom_kill_process+0x25d/0x600 [ 2995.356747] out_of_memory+0x1365/0x1660 [ 2995.357047] ? __pfx_out_of_memory+0x10/0x10 [ 2995.357382] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2995.357809] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2995.358248] ? lock_is_held_type+0x9f/0x120 [ 2995.358566] ? prepare_alloc_pages+0x377/0x500 [ 2995.358907] __alloc_pages+0x430/0x510 [ 2995.359193] ? __pfx___alloc_pages+0x10/0x10 [ 2995.359517] ? __alloc_pages+0x43d/0x510 [ 2995.359824] ? __lock_acquire+0x1936/0x63b0 [ 2995.360149] alloc_pages+0x1a0/0x260 [ 2995.360432] filemap_alloc_folio+0x374/0x410 [ 2995.360750] ? __pfx_lock_release+0x10/0x10 [ 2995.361068] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 2995.361420] ? xas_load+0x6a/0x140 [ 2995.361693] __filemap_get_folio+0x32b/0xcd0 [ 2995.362022] ? __pfx___filemap_get_folio+0x10/0x10 [ 2995.362372] ? filemap_fault+0x1444/0x2120 [ 2995.362680] ? filemap_fault+0x1444/0x2120 [ 2995.362981] ? lock_acquire+0x32/0xc0 [ 2995.363260] ? filemap_fault+0x1444/0x2120 [ 2995.363574] filemap_fault+0x1484/0x2120 [ 2995.363878] ? __pfx___lock_acquire+0x10/0x10 [ 2995.364220] ? __pfx_filemap_fault+0x10/0x10 [ 2995.364554] ? __pfx_filemap_map_pages+0x10/0x10 [ 2995.364892] __do_fault+0x10d/0x590 [ 2995.365166] ? __pfx_filemap_map_pages+0x10/0x10 [ 2995.365509] __handle_mm_fault+0x1287/0x31c0 [ 2995.365828] ? lock_is_held_type+0x9f/0x120 [ 2995.366144] ? __pfx___handle_mm_fault+0x10/0x10 [ 2995.366502] handle_mm_fault+0x1b8/0x860 [ 2995.366799] do_user_addr_fault+0x512/0x1320 [ 2995.367137] exc_page_fault+0x9c/0x1a0 [ 2995.367425] asm_exc_page_fault+0x26/0x30 [ 2995.367730] RIP: 0033:0x7f072e0d2688 [ 2995.367997] Code: db 34 b6 d7 82 de 1b 43 48 f7 a4 24 c8 00 00 00 48 8b 05 3b fd 09 01 48 69 8c 24 c0 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca <8b> 08 48 89 d0 41 39 ce 4c 0f 45 ea 48 2b 44 24 10 48 3b 05 e0 fc [ 2995.369245] RSP: 002b:00007ffcec902a80 EFLAGS: 00010212 [ 2995.369618] RAX: 0000001b2e820000 RBX: 00000000000003f6 RCX: 00000000002dab68 [ 2995.370109] RDX: 00000000002dae76 RSI: 00007ffcec902b40 RDI: 0000000000000001 [ 2995.370601] RBP: 00007ffcec902adc R08: 0000000000000bb1 R09: 00007ffcec918080 [ 2995.371100] R10: 00007ffcec918090 R11: 0000000000551378 R12: 0000000000000032 [ 2995.371597] R13: 00000000002dab2d R14: 000000000000000b R15: 00007ffcec902b40 [ 2995.372107] [ 2995.373119] Mem-Info: [ 2995.373308] active_anon:3259 inactive_anon:263090 isolated_anon:0 [ 2995.373308] active_file:26 inactive_file:12 isolated_file:0 [ 2995.373308] unevictable:4031 dirty:0 writeback:0 [ 2995.373308] slab_reclaimable:7518 slab_unreclaimable:53535 [ 2995.373308] mapped:69857 shmem:112 pagetables:4390 [ 2995.373308] sec_pagetables:0 bounce:0 [ 2995.373308] kernel_misc_reclaimable:0 [ 2995.373308] free:2974 free_pcp:309 free_cma:0 [ 2995.376030] Node 0 active_anon:13036kB inactive_anon:1052360kB active_file:104kB inactive_file:48kB unevictable:16124kB isolated(anon):0kB isolated(file):0kB mapped:279428kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7328kB pagetables:17560kB sec_pagetables:0kB all_unreclaimable? yes [ 2995.377804] Node 0 DMA free:6444kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7220kB active_file:4kB inactive_file:16kB unevictable:152kB writepending:0kB present:15992kB managed:15360kB mlocked:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2995.379506] lowmem_reserve[]: 0 1606 1606 1606 [ 2995.379854] Node 0 DMA32 free:5452kB boost:8192kB min:13296kB low:14940kB high:16584kB reserved_highatomic:16384KB active_anon:13036kB inactive_anon:1045140kB active_file:96kB inactive_file:56kB unevictable:15972kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15972kB bounce:0kB free_pcp:1236kB local_pcp:692kB free_cma:0kB [ 2995.381750] lowmem_reserve[]: 0 0 0 0 [ 2995.382049] Node 0 DMA: 5*4kB (UME) 23*8kB (UM) 13*16kB (UM) 8*32kB (UME) 6*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6428kB [ 2995.383195] Node 0 DMA32: 55*4kB (UMEH) 20*8kB (MEH) 39*16kB (UMEH) 105*32kB (MEH) 15*64kB (UMH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5452kB [ 2995.384256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2995.384819] 368 total pagecache pages [ 2995.385071] 0 pages in swap cache [ 2995.385305] Free swap = 0kB [ 2995.385511] Total swap = 0kB [ 2995.385718] 524158 pages RAM [ 2995.385941] 0 pages HighMem/MovableOnly [ 2995.386207] 106453 pages reserved [ 2995.386439] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=1723,uid=0 [ 2995.387399] Out of memory (oom_kill_allocating_task): Killed process 1723 (syz-executor.2) total-vm:93280kB, anon-rss:264kB, file-rss:35584kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 2995.389473] syz-executor.6 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2995.390314] CPU: 1 PID: 13277 Comm: syz-executor.6 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2995.390857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.391404] Call Trace: [ 2995.391581] [ 2995.391739] dump_stack_lvl+0xc1/0xf0 [ 2995.392016] dump_header+0x10a/0xd50 [ 2995.392306] oom_kill_process+0x25d/0x600 [ 2995.392595] out_of_memory+0x1365/0x1660 [ 2995.392881] ? __pfx_out_of_memory+0x10/0x10 [ 2995.393198] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2995.393627] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2995.394045] ? lock_is_held_type+0x9f/0x120 [ 2995.394368] ? prepare_alloc_pages+0x377/0x500 [ 2995.394694] __alloc_pages+0x430/0x510 [ 2995.394971] ? __lock_acquire+0xbd4/0x63b0 [ 2995.395279] ? __pfx___alloc_pages+0x10/0x10 [ 2995.395591] ? __pfx___lock_acquire+0x10/0x10 [ 2995.395916] ? mark_lock.part.0+0xef/0x2f30 [ 2995.396232] ? lock_is_held_type+0x9f/0x120 [ 2995.396545] vma_alloc_folio+0xe2/0x440 [ 2995.396824] __handle_mm_fault+0xfde/0x31c0 [ 2995.397120] ? lock_is_held_type+0x9f/0x120 [ 2995.397430] ? __pfx___handle_mm_fault+0x10/0x10 [ 2995.397776] handle_mm_fault+0x1b8/0x860 [ 2995.398061] __get_user_pages+0x4d6/0x1060 [ 2995.398376] ? __pfx___get_user_pages+0x10/0x10 [ 2995.398724] ? __pfx_mt_find+0x10/0x10 [ 2995.399012] populate_vma_page_range+0x2e7/0x420 [ 2995.399367] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2995.399730] ? __pfx_find_vma_intersection+0x10/0x10 [ 2995.400099] ? lock_acquire+0x32/0xc0 [ 2995.400374] ? __mm_populate+0x228/0x3a0 [ 2995.400678] __mm_populate+0x102/0x3a0 [ 2995.400955] ? __pfx___mm_populate+0x10/0x10 [ 2995.401279] ? up_write+0x196/0x510 [ 2995.401534] __do_sys_mlockall+0x414/0x4a0 [ 2995.401845] do_syscall_64+0x3f/0x90 [ 2995.402111] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2995.402479] RIP: 0033:0x7fd09934cb19 [ 2995.402735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.403990] RSP: 002b:00007fd0968c2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2995.404545] RAX: ffffffffffffffda RBX: 00007fd09945ff60 RCX: 00007fd09934cb19 [ 2995.405042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2995.405538] RBP: 00007fd0993a6f6d R08: 0000000000000000 R09: 0000000000000000 [ 2995.406030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2995.406516] R13: 00007fff0b4f3eef R14: 00007fd0968c2300 R15: 0000000000022000 [ 2995.407026] [ 2995.407261] Mem-Info: [ 2995.407446] active_anon:3259 inactive_anon:263090 isolated_anon:0 [ 2995.407446] active_file:26 inactive_file:0 isolated_file:0 [ 2995.407446] unevictable:4031 dirty:0 writeback:0 [ 2995.407446] slab_reclaimable:7518 slab_unreclaimable:53535 [ 2995.407446] mapped:69857 shmem:112 pagetables:4390 [ 2995.407446] sec_pagetables:0 bounce:0 [ 2995.407446] kernel_misc_reclaimable:0 [ 2995.407446] free:2974 free_pcp:309 free_cma:0 [ 2995.410020] Node 0 active_anon:13036kB inactive_anon:1052360kB active_file:104kB inactive_file:0kB unevictable:16124kB isolated(anon):0kB isolated(file):0kB mapped:279428kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7328kB pagetables:17560kB sec_pagetables:0kB all_unreclaimable? yes [ 2995.411854] Node 0 DMA free:6444kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7220kB active_file:24kB inactive_file:16kB unevictable:152kB writepending:0kB present:15992kB managed:15360kB mlocked:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2995.413556] lowmem_reserve[]: 0 1606 1606 1606 [ 2995.413928] Node 0 DMA32 free:5452kB boost:8192kB min:13296kB low:14940kB high:16584kB reserved_highatomic:16384KB active_anon:13036kB inactive_anon:1045140kB active_file:96kB inactive_file:0kB unevictable:15972kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15972kB bounce:0kB free_pcp:1236kB local_pcp:692kB free_cma:0kB [ 2995.415928] lowmem_reserve[]: 0 0 0 0 [ 2995.416236] Node 0 DMA: 5*4kB (UME) 23*8kB (UM) 13*16kB (UM) 8*32kB (UME) 6*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6428kB [ 2995.417454] Node 0 DMA32: 55*4kB (UMEH) 20*8kB (MEH) 39*16kB (UMEH) 105*32kB (MEH) 15*64kB (UMH) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5452kB [ 2995.418582] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2995.419187] 368 total pagecache pages [ 2995.419451] 0 pages in swap cache [ 2995.419696] Free swap = 0kB [ 2995.419934] Total swap = 0kB [ 2995.420152] 524158 pages RAM [ 2995.420382] 0 pages HighMem/MovableOnly [ 2995.420663] 106453 pages reserved [ 2995.420928] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz6,mems_allowed=0,global_oom,task_memcg=/syz6,task=syz-executor.6,pid=13277,uid=0 [ 2995.421943] Out of memory (oom_kill_allocating_task): Killed process 13268 (syz-executor.6) total-vm:93412kB, anon-rss:2856kB, file-rss:35456kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 2995.443364] syz-executor.4 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=0 [ 2995.444274] CPU: 0 PID: 269 Comm: syz-executor.4 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2995.444870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.445473] Call Trace: [ 2995.445672] [ 2995.445853] dump_stack_lvl+0xc1/0xf0 [ 2995.446171] dump_header+0x10a/0xd50 [ 2995.446478] oom_kill_process+0x25d/0x600 [ 2995.446798] out_of_memory+0x1365/0x1660 [ 2995.447124] ? __pfx_out_of_memory+0x10/0x10 [ 2995.447468] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2995.447931] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2995.448401] ? lock_is_held_type+0x9f/0x120 [ 2995.448746] ? prepare_alloc_pages+0x377/0x500 [ 2995.449105] __alloc_pages+0x430/0x510 [ 2995.449404] ? __pfx___alloc_pages+0x10/0x10 [ 2995.449752] ? __alloc_pages+0x43d/0x510 [ 2995.450074] ? __lock_acquire+0x1936/0x63b0 [ 2995.450427] alloc_pages+0x1a0/0x260 [ 2995.450719] filemap_alloc_folio+0x374/0x410 [ 2995.451061] ? __pfx_lock_release+0x10/0x10 [ 2995.451400] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 2995.451775] ? xas_load+0x6a/0x140 [ 2995.452065] __filemap_get_folio+0x32b/0xcd0 [ 2995.452416] ? __pfx___filemap_get_folio+0x10/0x10 [ 2995.452785] ? filemap_fault+0x1444/0x2120 [ 2995.453117] ? filemap_fault+0x1444/0x2120 [ 2995.453437] ? lock_acquire+0x32/0xc0 [ 2995.453738] ? filemap_fault+0x1444/0x2120 [ 2995.454062] filemap_fault+0x1484/0x2120 [ 2995.454386] ? __pfx___lock_acquire+0x10/0x10 [ 2995.454734] ? __pfx_filemap_fault+0x10/0x10 [ 2995.455095] ? __pfx_filemap_map_pages+0x10/0x10 [ 2995.455452] __do_fault+0x10d/0x590 [ 2995.455742] ? __pfx_filemap_map_pages+0x10/0x10 [ 2995.456097] __handle_mm_fault+0x1287/0x31c0 [ 2995.456448] ? lock_is_held_type+0x9f/0x120 [ 2995.456778] ? __pfx___handle_mm_fault+0x10/0x10 [ 2995.457160] handle_mm_fault+0x1b8/0x860 [ 2995.457474] do_user_addr_fault+0x512/0x1320 [ 2995.457814] exc_page_fault+0x9c/0x1a0 [ 2995.458117] asm_exc_page_fault+0x26/0x30 [ 2995.458434] RIP: 0033:0x7ff90df8d688 [ 2995.458718] Code: db 34 b6 d7 82 de 1b 43 48 f7 a4 24 c8 00 00 00 48 8b 05 3b fd 09 01 48 69 8c 24 c0 00 00 00 e8 03 00 00 48 c1 ea 12 48 01 ca <8b> 08 48 89 d0 41 39 ce 4c 0f 45 ea 48 2b 44 24 10 48 3b 05 e0 fc [ 2995.459977] RSP: 002b:00007fffebfed480 EFLAGS: 00010206 [ 2995.460378] RAX: 0000001b2c420000 RBX: 0000000000000320 RCX: 00000000002dab68 [ 2995.460895] RDX: 00000000002dac3f RSI: 00007fffebfed540 RDI: 0000000000000001 [ 2995.461410] RBP: 00007fffebfed4dc R08: 0000000000000bb1 R09: 00007fffebff5080 [ 2995.461927] R10: 00007fffebff5090 R11: 0000000000550f0a R12: 0000000000000032 [ 2995.462442] R13: 00000000002daaa7 R14: 0000000000000004 R15: 00007fffebfed540 [ 2995.462973] [ 2995.463188] Mem-Info: [ 2995.463382] active_anon:3259 inactive_anon:263090 isolated_anon:0 [ 2995.463382] active_file:26 inactive_file:8 isolated_file:0 [ 2995.463382] unevictable:4031 dirty:0 writeback:0 [ 2995.463382] slab_reclaimable:7518 slab_unreclaimable:53535 [ 2995.463382] mapped:69857 shmem:112 pagetables:4390 [ 2995.463382] sec_pagetables:0 bounce:0 [ 2995.463382] kernel_misc_reclaimable:0 [ 2995.463382] free:2974 free_pcp:317 free_cma:0 [ 2995.466067] Node 0 active_anon:13036kB inactive_anon:1052360kB active_file:104kB inactive_file:32kB unevictable:16124kB isolated(anon):0kB isolated(file):0kB mapped:279428kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7296kB pagetables:17560kB sec_pagetables:0kB all_unreclaimable? yes [ 2995.468023] Node 0 DMA free:6444kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7220kB active_file:20kB inactive_file:16kB unevictable:152kB writepending:0kB present:15992kB managed:15360kB mlocked:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2995.470419] lowmem_reserve[]: 0 1606 1606 1606 [ 2995.470914] Node 0 DMA32 free:5452kB boost:8192kB min:13296kB low:14940kB high:16584kB reserved_highatomic:8192KB active_anon:13036kB inactive_anon:1045140kB active_file:92kB inactive_file:36kB unevictable:15972kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15972kB bounce:0kB free_pcp:1372kB local_pcp:576kB free_cma:0kB [ 2995.472989] lowmem_reserve[]: 0 0 0 0 [ 2995.473303] Node 0 DMA: 5*4kB (UME) 23*8kB (UM) 13*16kB (UM) 8*32kB (UME) 6*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6428kB [ 2995.474563] Node 0 DMA32: 55*4kB (UME) 20*8kB (ME) 39*16kB (UME) 105*32kB (ME) 15*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5452kB [ 2995.475659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2995.476302] 368 total pagecache pages [ 2995.476584] 0 pages in swap cache [ 2995.476857] Free swap = 0kB [ 2995.477086] Total swap = 0kB [ 2995.477314] 524158 pages RAM [ 2995.477541] 0 pages HighMem/MovableOnly [ 2995.477844] 106453 pages reserved [ 2995.478102] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0,global_oom,task_memcg=/syz4,task=syz-executor.4,pid=269,uid=0 [ 2995.479294] Out of memory (oom_kill_allocating_task): Killed process 269 (syz-executor.4) total-vm:93280kB, anon-rss:284kB, file-rss:35456kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 2995.508458] syz-executor.7 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2995.509356] CPU: 1 PID: 13275 Comm: syz-executor.7 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2995.509903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.510477] Call Trace: [ 2995.510656] [ 2995.510822] dump_stack_lvl+0xc1/0xf0 [ 2995.511113] dump_header+0x10a/0xd50 [ 2995.511381] oom_kill_process+0x25d/0x600 [ 2995.511689] out_of_memory+0x1365/0x1660 [ 2995.511979] ? __pfx_out_of_memory+0x10/0x10 [ 2995.512312] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2995.512728] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2995.513164] ? lock_is_held_type+0x9f/0x120 [ 2995.513475] ? prepare_alloc_pages+0x377/0x500 [ 2995.513806] ? lock_is_held_type+0x9f/0x120 [ 2995.514106] __alloc_pages+0x430/0x510 [ 2995.514393] ? __lock_acquire+0xbd4/0x63b0 [ 2995.514708] ? __pfx___alloc_pages+0x10/0x10 [ 2995.515041] ? mark_lock.part.0+0xef/0x2f30 [ 2995.515345] ? __pfx___lock_acquire+0x10/0x10 [ 2995.515683] vma_alloc_folio+0xe2/0x440 [ 2995.515962] __handle_mm_fault+0xfde/0x31c0 [ 2995.516283] ? lock_acquire.part.0+0xec/0x320 [ 2995.516603] ? lock_is_held_type+0x9f/0x120 [ 2995.516921] ? __pfx___handle_mm_fault+0x10/0x10 [ 2995.517263] handle_mm_fault+0x1b8/0x860 [ 2995.517561] __get_user_pages+0x4d6/0x1060 [ 2995.517886] ? __pfx___get_user_pages+0x10/0x10 [ 2995.518229] ? __pfx_mt_find+0x10/0x10 [ 2995.518507] populate_vma_page_range+0x2e7/0x420 [ 2995.518855] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2995.519214] ? __pfx_find_vma_intersection+0x10/0x10 [ 2995.519583] ? lock_acquire+0x32/0xc0 [ 2995.519858] ? __mm_populate+0x228/0x3a0 [ 2995.520157] __mm_populate+0x102/0x3a0 [ 2995.520439] ? __pfx___mm_populate+0x10/0x10 [ 2995.520771] ? up_write+0x196/0x510 [ 2995.521051] __do_sys_mlockall+0x414/0x4a0 [ 2995.521363] do_syscall_64+0x3f/0x90 [ 2995.521644] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2995.522019] RIP: 0033:0x7fd7734ddb19 [ 2995.522287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.523530] RSP: 002b:00007fd770a53188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2995.524057] RAX: ffffffffffffffda RBX: 00007fd7735f0f60 RCX: 00007fd7734ddb19 [ 2995.524562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2995.525060] RBP: 00007fd773537f6d R08: 0000000000000000 R09: 0000000000000000 [ 2995.525552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2995.526053] R13: 00007ffc98b57bcf R14: 00007fd770a53300 R15: 0000000000022000 [ 2995.526561] [ 2995.526813] Mem-Info: [ 2995.526998] active_anon:3259 inactive_anon:263090 isolated_anon:0 [ 2995.526998] active_file:21 inactive_file:6 isolated_file:0 [ 2995.526998] unevictable:4031 dirty:0 writeback:0 [ 2995.526998] slab_reclaimable:7518 slab_unreclaimable:53535 [ 2995.526998] mapped:69857 shmem:112 pagetables:4390 [ 2995.526998] sec_pagetables:0 bounce:0 [ 2995.526998] kernel_misc_reclaimable:0 [ 2995.526998] free:2974 free_pcp:419 free_cma:0 [ 2995.529605] Node 0 active_anon:13036kB inactive_anon:1052360kB active_file:84kB inactive_file:24kB unevictable:16124kB isolated(anon):0kB isolated(file):0kB mapped:279428kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7040kB pagetables:17560kB sec_pagetables:0kB all_unreclaimable? yes [ 2995.531400] Node 0 DMA free:6444kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7220kB active_file:20kB inactive_file:16kB unevictable:152kB writepending:0kB present:15992kB managed:15360kB mlocked:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2995.533093] lowmem_reserve[]: 0 1606 1606 1606 [ 2995.533445] Node 0 DMA32 free:5452kB boost:8192kB min:13296kB low:14940kB high:16584kB reserved_highatomic:8192KB active_anon:13036kB inactive_anon:1045140kB active_file:92kB inactive_file:28kB unevictable:15972kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15972kB bounce:0kB free_pcp:1676kB local_pcp:1084kB free_cma:0kB [ 2995.535462] lowmem_reserve[]: 0 0 0 0 [ 2995.535746] Node 0 DMA: 5*4kB (UME) 23*8kB (UM) 13*16kB (UM) 8*32kB (UME) 6*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6428kB [ 2995.536964] Node 0 DMA32: 55*4kB (UME) 20*8kB (ME) 39*16kB (UME) 105*32kB (ME) 15*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5452kB [ 2995.538041] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2995.538621] 368 total pagecache pages [ 2995.538904] 0 pages in swap cache [ 2995.539147] Free swap = 0kB [ 2995.539368] Total swap = 0kB [ 2995.539590] 524158 pages RAM [ 2995.539827] 0 pages HighMem/MovableOnly [ 2995.540103] 106453 pages reserved [ 2995.540355] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz7,mems_allowed=0,global_oom,task_memcg=/syz7,task=syz-executor.7,pid=13275,uid=0 [ 2995.541371] Out of memory (oom_kill_allocating_task): Killed process 13265 (syz-executor.7) total-vm:93412kB, anon-rss:936kB, file-rss:35584kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 2995.569757] syz-executor.5 invoked oom-killer: gfp_mask=0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 2995.570594] CPU: 0 PID: 13276 Comm: syz-executor.5 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2995.571147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.571676] Call Trace: [ 2995.571863] [ 2995.572027] dump_stack_lvl+0xc1/0xf0 [ 2995.572321] dump_header+0x10a/0xd50 [ 2995.572577] oom_kill_process+0x25d/0x600 [ 2995.572869] out_of_memory+0x1365/0x1660 [ 2995.573166] ? __pfx_out_of_memory+0x10/0x10 [ 2995.573486] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2995.573895] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2995.574328] ? lock_is_held_type+0x9f/0x120 [ 2995.574632] ? prepare_alloc_pages+0x377/0x500 [ 2995.574967] __alloc_pages+0x430/0x510 [ 2995.575235] ? __lock_acquire+0xbd4/0x63b0 [ 2995.575541] ? __pfx___alloc_pages+0x10/0x10 [ 2995.575849] ? __pfx___lock_acquire+0x10/0x10 [ 2995.576180] ? mark_lock.part.0+0xef/0x2f30 [ 2995.576489] ? lock_is_held_type+0x9f/0x120 [ 2995.576801] vma_alloc_folio+0xe2/0x440 [ 2995.577074] __handle_mm_fault+0xfde/0x31c0 [ 2995.577380] ? lock_is_held_type+0x9f/0x120 [ 2995.577676] ? __pfx___handle_mm_fault+0x10/0x10 [ 2995.578029] handle_mm_fault+0x1b8/0x860 [ 2995.578305] __get_user_pages+0x4d6/0x1060 [ 2995.578614] ? __pfx___get_user_pages+0x10/0x10 [ 2995.578930] ? __pfx_mt_find+0x10/0x10 [ 2995.579215] populate_vma_page_range+0x2e7/0x420 [ 2995.579542] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2995.579913] ? __pfx_find_vma_intersection+0x10/0x10 [ 2995.580275] ? lock_acquire+0x32/0xc0 [ 2995.580555] ? __mm_populate+0x228/0x3a0 [ 2995.580857] __mm_populate+0x102/0x3a0 [ 2995.581141] ? __pfx___mm_populate+0x10/0x10 [ 2995.581461] ? up_write+0x196/0x510 [ 2995.581729] __do_sys_mlockall+0x414/0x4a0 [ 2995.582033] do_syscall_64+0x3f/0x90 [ 2995.582309] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2995.582677] RIP: 0033:0x7fdcd2862b19 [ 2995.582938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.584145] RSP: 002b:00007fdccfdd8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2995.584665] RAX: ffffffffffffffda RBX: 00007fdcd2975f60 RCX: 00007fdcd2862b19 [ 2995.585146] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2995.585629] RBP: 00007fdcd28bcf6d R08: 0000000000000000 R09: 0000000000000000 [ 2995.586114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2995.586606] R13: 00007ffedf7a275f R14: 00007fdccfdd8300 R15: 0000000000022000 [ 2995.587111] [ 2995.587904] Mem-Info: [ 2995.588088] active_anon:3259 inactive_anon:263090 isolated_anon:0 [ 2995.588088] active_file:15 inactive_file:4 isolated_file:0 [ 2995.588088] unevictable:4031 dirty:0 writeback:0 [ 2995.588088] slab_reclaimable:7518 slab_unreclaimable:53535 [ 2995.588088] mapped:69857 shmem:112 pagetables:4390 [ 2995.588088] sec_pagetables:0 bounce:0 [ 2995.588088] kernel_misc_reclaimable:0 [ 2995.588088] free:2974 free_pcp:429 free_cma:0 [ 2995.590654] Node 0 active_anon:13036kB inactive_anon:1052360kB active_file:60kB inactive_file:16kB unevictable:16124kB isolated(anon):0kB isolated(file):0kB mapped:279428kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:7008kB pagetables:17560kB sec_pagetables:0kB all_unreclaimable? yes [ 2995.592452] Node 0 DMA free:6444kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7220kB active_file:20kB inactive_file:12kB unevictable:152kB writepending:0kB present:15992kB managed:15360kB mlocked:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2995.594117] lowmem_reserve[]: 0 1606 1606 1606 [ 2995.594462] Node 0 DMA32 free:5452kB boost:8192kB min:13296kB low:14940kB high:16584kB reserved_highatomic:8192KB active_anon:13036kB inactive_anon:1045140kB active_file:92kB inactive_file:12kB unevictable:15972kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15972kB bounce:0kB free_pcp:1716kB local_pcp:624kB free_cma:0kB [ 2995.596442] lowmem_reserve[]: 0 0 0 0 [ 2995.596725] Node 0 DMA: 5*4kB (UME) 23*8kB (UM) 13*16kB (UM) 8*32kB (UME) 6*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6428kB [ 2995.597909] Node 0 DMA32: 55*4kB (UME) 20*8kB (ME) 39*16kB (UME) 105*32kB (ME) 15*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5452kB [ 2995.598965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2995.599541] 368 total pagecache pages [ 2995.599807] 0 pages in swap cache [ 2995.600047] Free swap = 0kB [ 2995.600262] Total swap = 0kB [ 2995.600478] 524158 pages RAM [ 2995.600686] 0 pages HighMem/MovableOnly [ 2995.600976] 106453 pages reserved [ 2995.601211] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz5,mems_allowed=0,global_oom,task_memcg=/syz5,task=syz-executor.5,pid=13276,uid=0 [ 2995.602215] Out of memory (oom_kill_allocating_task): Killed process 13263 (syz-executor.5) total-vm:93412kB, anon-rss:1064kB, file-rss:35456kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 2995.672181] syz-executor.2 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 2995.673882] CPU: 1 PID: 13264 Comm: syz-executor.2 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2995.674978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.676099] Call Trace: [ 2995.676449] [ 2995.676750] dump_stack_lvl+0xc1/0xf0 [ 2995.677353] dump_header+0x10a/0xd50 [ 2995.677913] oom_kill_process+0x25d/0x600 [ 2995.678458] out_of_memory+0x1365/0x1660 [ 2995.679004] ? __pfx_out_of_memory+0x10/0x10 [ 2995.679599] __alloc_pages_slowpath.constprop.0+0x19ce/0x2010 [ 2995.680366] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2995.681162] ? lock_is_held_type+0x9f/0x120 [ 2995.681737] ? prepare_alloc_pages+0x377/0x500 [ 2995.682353] __alloc_pages+0x430/0x510 [ 2995.682861] ? __pfx___alloc_pages+0x10/0x10 [ 2995.683450] ? find_held_lock+0x2c/0x110 [ 2995.683999] ? __lock_acquire+0x1936/0x63b0 [ 2995.684604] alloc_pages+0x1a0/0x260 [ 2995.685110] filemap_alloc_folio+0x374/0x410 [ 2995.685680] ? __pfx_lock_release+0x10/0x10 [ 2995.686263] ? __pfx_filemap_alloc_folio+0x10/0x10 [ 2995.686911] ? xas_load+0x6a/0x140 [ 2995.687407] __filemap_get_folio+0x32b/0xcd0 [ 2995.687983] ? __pfx___filemap_get_folio+0x10/0x10 [ 2995.688635] ? filemap_fault+0x1444/0x2120 [ 2995.689202] ? filemap_fault+0x1444/0x2120 [ 2995.689755] ? lock_acquire+0x32/0xc0 [ 2995.690272] ? filemap_fault+0x1444/0x2120 [ 2995.690829] filemap_fault+0x1484/0x2120 [ 2995.691380] ? __pfx_filemap_fault+0x10/0x10 [ 2995.691992] ? __pfx_filemap_map_pages+0x10/0x10 [ 2995.692629] __do_fault+0x10d/0x590 [ 2995.693132] ? __pfx_filemap_map_pages+0x10/0x10 [ 2995.693732] __handle_mm_fault+0x1287/0x31c0 [ 2995.694314] ? lock_acquire.part.0+0xec/0x320 [ 2995.694917] ? lock_is_held_type+0x9f/0x120 [ 2995.695487] ? __pfx___handle_mm_fault+0x10/0x10 [ 2995.696124] handle_mm_fault+0x1b8/0x860 [ 2995.696673] do_user_addr_fault+0x512/0x1320 [ 2995.697280] exc_page_fault+0x9c/0x1a0 [ 2995.697807] asm_exc_page_fault+0x26/0x30 [ 2995.698364] RIP: 0033:0x7f072e0c6186 [ 2995.698852] Code: 00 e8 3e d3 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 17 4c 8d 05 86 6e 57 00 4c 39 c2 73 0b 48 8d 42 08 48 89 07 <48> 8b 02 c3 50 49 8d 88 00 00 c0 ff 48 8d 35 1a 92 0b 00 31 c0 48 [ 2995.701128] RSP: 002b:00007ffcec9028a8 EFLAGS: 00010283 [ 2995.701812] RAX: 00007f072e23edb0 RBX: 00007f072e239b60 RCX: 0000000000000000 [ 2995.702710] RDX: 00007f072e23eda8 RSI: ffffffff81388e2a RDI: 00007ffcec902968 [ 2995.703608] RBP: 00007ffcec902968 R08: 00007f072e63d000 R09: 0000001b2e8228b0 [ 2995.704521] R10: 00000000000000aa R11: 00000000b9dca0ae R12: 00000000002daac8 [ 2995.705417] R13: 00000000000003e8 R14: 00007f072e238f60 R15: 00000000002da99c [ 2995.706325] ? exit_to_user_mode_prepare+0x4a/0x180 [ 2995.706997] [ 2995.708633] Mem-Info: [ 2995.709253] active_anon:3259 inactive_anon:263090 isolated_anon:0 [ 2995.709253] active_file:35 inactive_file:2 isolated_file:0 [ 2995.709253] unevictable:4031 dirty:0 writeback:0 [ 2995.709253] slab_reclaimable:7518 slab_unreclaimable:53559 [ 2995.709253] mapped:69857 shmem:112 pagetables:4390 [ 2995.709253] sec_pagetables:0 bounce:0 [ 2995.709253] kernel_misc_reclaimable:0 [ 2995.709253] free:2974 free_pcp:404 free_cma:0 [ 2995.713865] Node 0 active_anon:13036kB inactive_anon:1052360kB active_file:140kB inactive_file:8kB unevictable:16124kB isolated(anon):0kB isolated(file):0kB mapped:279428kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:6976kB pagetables:17560kB sec_pagetables:0kB all_unreclaimable? yes [ 2995.717165] Node 0 DMA free:6444kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7220kB active_file:20kB inactive_file:0kB unevictable:152kB writepending:0kB present:15992kB managed:15360kB mlocked:152kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2995.720271] lowmem_reserve[]: 0 1606 1606 1606 [ 2995.720941] Node 0 DMA32 free:5452kB boost:8192kB min:13296kB low:14940kB high:16584kB reserved_highatomic:10240KB active_anon:13036kB inactive_anon:1045140kB active_file:88kB inactive_file:88kB unevictable:15972kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15972kB bounce:0kB free_pcp:1584kB local_pcp:1088kB free_cma:0kB [ 2995.724599] lowmem_reserve[]: 0 0 0 0 [ 2995.725146] Node 0 DMA: 5*4kB (UME) 23*8kB (UM) 13*16kB (UM) 8*32kB (UME) 6*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6428kB [ 2995.727312] Node 0 DMA32: 55*4kB (MEH) 20*8kB (ME) 39*16kB (UME) 105*32kB (ME) 15*64kB (MH) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5452kB [ 2995.729308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2995.730339] 368 total pagecache pages [ 2995.730851] 0 pages in swap cache [ 2995.731276] Free swap = 0kB [ 2995.731679] Total swap = 0kB [ 2995.732089] 524158 pages RAM [ 2995.732502] 0 pages HighMem/MovableOnly [ 2995.733019] 106453 pages reserved [ 2995.733467] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0,global_oom,task_memcg=/syz2,task=syz-executor.2,pid=13264,uid=0 [ 2995.735223] Out of memory (oom_kill_allocating_task): Killed process 13264 (syz-executor.2) total-vm:93544kB, anon-rss:276kB, file-rss:35456kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 2995.741103] syz-executor.3: page allocation failure: order:0, mode:0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 2995.743179] CPU: 1 PID: 13272 Comm: syz-executor.3 Not tainted 6.2.0-rc8-next-20230217 #1 [ 2995.744201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.745196] Call Trace: [ 2995.745522] [ 2995.745814] dump_stack_lvl+0xc1/0xf0 [ 2995.746313] warn_alloc+0x214/0x370 [ 2995.746797] ? __pfx_warn_alloc+0x10/0x10 [ 2995.747335] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2995.747975] ? __alloc_pages_slowpath.constprop.0+0xafe/0x2010 [ 2995.748721] ? __pfx_out_of_memory+0x10/0x10 [ 2995.749296] __alloc_pages_slowpath.constprop.0+0x1bb7/0x2010 [ 2995.750062] ? __pfx___alloc_pages_slowpath.constprop.0+0x10/0x10 [ 2995.750827] ? lock_is_held_type+0x9f/0x120 [ 2995.751395] ? prepare_alloc_pages+0x377/0x500 [ 2995.751980] ? lock_is_held_type+0x9f/0x120 [ 2995.752556] __alloc_pages+0x430/0x510 [ 2995.753056] ? __lock_acquire+0xbd4/0x63b0 [ 2995.753615] ? __pfx___alloc_pages+0x10/0x10 [ 2995.754200] ? mark_lock.part.0+0xef/0x2f30 [ 2995.754762] ? __pfx___lock_acquire+0x10/0x10 [ 2995.755356] vma_alloc_folio+0xe2/0x440 [ 2995.755869] __handle_mm_fault+0xfde/0x31c0 [ 2995.756426] ? lock_acquire.part.0+0xec/0x320 [ 2995.757029] ? lock_is_held_type+0x9f/0x120 [ 2995.757588] ? __pfx___handle_mm_fault+0x10/0x10 [ 2995.758242] handle_mm_fault+0x1b8/0x860 [ 2995.758757] __get_user_pages+0x4d6/0x1060 [ 2995.759332] ? __pfx___get_user_pages+0x10/0x10 [ 2995.759927] ? __pfx_mt_find+0x10/0x10 [ 2995.760469] populate_vma_page_range+0x2e7/0x420 [ 2995.761094] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2995.761772] ? __pfx_find_vma_intersection+0x10/0x10 [ 2995.762423] ? lock_acquire+0x32/0xc0 [ 2995.762942] ? __mm_populate+0x228/0x3a0 [ 2995.763493] __mm_populate+0x102/0x3a0 [ 2995.763994] ? __pfx___mm_populate+0x10/0x10 [ 2995.764609] ? up_write+0x196/0x510 [ 2995.765109] __do_sys_mlockall+0x414/0x4a0 [ 2995.765645] do_syscall_64+0x3f/0x90 [ 2995.766157] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 2995.766811] RIP: 0033:0x7f53d7cf0b19 [ 2995.767296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.769455] RSP: 002b:00007f53d5266188 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 2995.770415] RAX: ffffffffffffffda RBX: 00007f53d7e03f60 RCX: 00007f53d7cf0b19 [ 2995.771310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2995.772220] RBP: 00007f53d7d4af6d R08: 0000000000000000 R09: 0000000000000000 [ 2995.773116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2995.774004] R13: 00007ffc19cd855f R14: 00007f53d5266300 R15: 0000000000022000 [ 2995.774929] [ 2995.775296] Mem-Info: [ 2995.775621] active_anon:3259 inactive_anon:263090 isolated_anon:0 [ 2995.775621] active_file:14 inactive_file:2 isolated_file:0 [ 2995.775621] unevictable:4031 dirty:0 writeback:0 [ 2995.775621] slab_reclaimable:7518 slab_unreclaimable:53559 [ 2995.775621] mapped:69857 shmem:112 pagetables:4390 [ 2995.775621] sec_pagetables:0 bounce:0 [ 2995.775621] kernel_misc_reclaimable:0 [ 2995.775621] free:2974 free_pcp:420 free_cma:0 [ 2995.781326] Node 0 active_anon:13036kB inactive_anon:1052360kB active_file:56kB inactive_file:8kB unevictable:15368kB isolated(anon):0kB isolated(file):0kB mapped:279428kB dirty:0kB writeback:0kB shmem:448kB writeback_tmp:0kB kernel_stack:6912kB pagetables:17560kB sec_pagetables:0kB all_unreclaimable? yes [ 2995.784702] Node 0 DMA free:6444kB boost:0kB min:44kB low:56kB high:68kB reserved_highatomic:0KB active_anon:0kB inactive_anon:7220kB active_file:20kB inactive_file:12kB unevictable:152kB writepending:0kB present:15992kB managed:15360kB mlocked:152kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 2995.787958] lowmem_reserve[]: 0 1606 1606 1606 [ 2995.788581] Node 0 DMA32 free:5228kB boost:10240kB min:15344kB low:16988kB high:18632kB reserved_highatomic:14336KB active_anon:13036kB inactive_anon:1045140kB active_file:88kB inactive_file:0kB unevictable:15216kB writepending:0kB present:2080640kB managed:1655460kB mlocked:15216kB bounce:0kB free_pcp:2600kB local_pcp:1072kB free_cma:0kB [ 2995.792077] lowmem_reserve[]: 0 0 0 0 [ 2995.792610] Node 0 DMA: 5*4kB (UME) 23*8kB (UM) 13*16kB (UM) 8*32kB (UME) 6*64kB (UME) 4*128kB (UME) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 6428kB [ 2995.794778] Node 0 DMA32: 55*4kB (MEH) 20*8kB (MEH) 39*16kB (UMEH) 104*32kB (ME) 14*64kB (MH) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5228kB [ 2995.796681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2995.797770] 368 total pagecache pages [ 2995.798259] 0 pages in swap cache [ 2995.798712] Free swap = 0kB [ 2995.799130] Total swap = 0kB [ 2995.799531] 524158 pages RAM [ 2995.799937] 0 pages HighMem/MovableOnly [ 2995.800451] 106453 pages reserved 16:40:09 executing program 3: mlockall(0x0) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 16:40:09 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x0, [0x8, 0x0, 0x0, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x0, 0xfc8d, 0x3f, 0x6, 0x0, 0xffff, 0x7, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x47d7, 0x5e, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x1ff, 0x6, 0x5, 0x0, 0x0, 0x0, 0x3f, 0x5d59, 0x7, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x401, 0x5, 0x0, 0x0, 0x2, 0x0, 0xffff, 0x0, 0x94, 0x5, 0x2, 0x0, 0xfffffffffffffff7, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x2, 0x2, 0x0, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0x0, 0x6, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x0, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r2}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={0x0, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 16:40:09 executing program 6: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), &(0x7f0000000500), 0x0, {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:40:09 executing program 4: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000540)) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r1}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18}, './file1\x00'}) 16:40:09 executing program 5: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) fork() 16:40:09 executing program 7: mlockall(0x0) getrandom(&(0x7f0000000000)=""/165, 0xa5, 0x1) mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$CDROMSTOP(r0, 0x5307) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000140)) clock_gettime(0x5, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f00000003c0)) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000400)) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000440)) ioctl$CDROMMULTISESSION(r0, 0x5310, &(0x7f0000000480)={@lba=0x400, 0x0, 0x2}) r2 = fork() r3 = clone3(&(0x7f0000001840)={0x11000100, &(0x7f0000001600), &(0x7f0000001640), &(0x7f0000001680), {0x13}, &(0x7f00000016c0)=""/251, 0xfb, &(0x7f00000017c0)=""/59, &(0x7f0000001800)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) r4 = fork() r5 = getpgrp(0x0) clone3(&(0x7f0000001b80)={0x1100, &(0x7f00000018c0), &(0x7f0000001900), &(0x7f0000001940)=0x0, {0x3e}, &(0x7f0000001980)=""/251, 0xfb, &(0x7f0000001a80)=""/183, &(0x7f0000001b40)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r1}}, 0x58) clone3(&(0x7f0000001c40)={0x80040000, &(0x7f00000004c0), 0x0, &(0x7f0000000540), {0x8}, &(0x7f0000000580)=""/4096, 0x1000, &(0x7f0000001580)=""/88, &(0x7f0000001c00)=[r2, 0xffffffffffffffff, 0x0, 0x0, r3, r4, r5, r6], 0x8, {r1}}, 0x58) 16:40:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000840)={0x0, 0x8, 0x1, [0x8, 0x9, 0x7f, 0x7ff, 0xffff], [0x1, 0x9, 0x8, 0xffff, 0xffffffffffff4faa, 0xf33a, 0x80000000, 0x0, 0x3f, 0x6, 0xc2de, 0xffff, 0x7, 0xffffffffffff25e7, 0x6, 0x4, 0x0, 0x3, 0xa2, 0x47d7, 0x0, 0x1, 0x0, 0x6, 0x10001, 0x1, 0xa411, 0x1ff, 0x6, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9a3d, 0x0, 0x0, 0x2, 0x4e5, 0x7, 0x8, 0x1f, 0x3, 0xffff, 0xfff, 0x90, 0x6, 0x8, 0x6, 0x4000000000000000, 0x7, 0x7, 0x3f, 0x3, 0x0, 0x5, 0x5881, 0x6, 0x2, 0x0, 0xffff, 0x3, 0x94, 0x5, 0x2, 0x1, 0x0, 0x4f, 0x80000001, 0x3ff, 0xfffffffffffffff7, 0x7ff, 0x1a2, 0x0, 0x401, 0x9, 0x3, 0x1cb, 0x0, 0x2, 0x101, 0x5, 0x81, 0x0, 0x8, 0x3f, 0x3, 0x400, 0x9, 0x78, 0x200000, 0x2, 0x5, 0xa6eb, 0x0, 0x6, 0x8, 0xfffffffffffff800, 0x8000, 0x40, 0x2f029543, 0x3, 0xfffffffffffffffa, 0xf5f, 0x2800000000000, 0x67b6, 0x2, 0xe047, 0xc0, 0x0, 0x8, 0x9, 0x3, 0x8, 0x5, 0x100000000, 0x2, 0x8, 0x4]}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r9}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000e00)={r10, 0x2, r1, 0x764000}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) 16:40:09 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x7, 0x6, 0xf, 0x0, 0x33, @msf={0xef, 0x6, 0xdb}, @msf={0x1, 0x7}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000540)) r5 = pidfd_getfd(r3, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r1, {0xbb5}}, './file2\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x0, 0x1}}, './file2\x00'}) io_uring_setup(0x600f, &(0x7f0000000c80)={0x0, 0xb240, 0x0, 0x3, 0xc1, 0x0, r5}) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000d00)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000000d40)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d80)) 16:40:09 executing program 3: mlockall(0x1) r0 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CDROMSTOP(r0, 0x5307) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) VM DIAGNOSIS: 16:40:13 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800e621d10 RCX=ffff88800844f780 RDX=ffffea0000398840 RSI=ffffea0000398840 RDI=0000000040000000 RBP=0000000000000000 RSP=ffff888034317620 R8 =ffff88800e621d10 R9 =00000000800d000b R10=ffffea0000398840 R11=0000000000000000 R12=dffffc0000000000 R13=ffff888034317660 R14=ffff88800844f780 R15=ffff88800e621720 RIP=ffffffff818012ac RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0c5f8b3000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0c5f8b1000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7ec794a5e0 CR3=0000000005482000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff0000000000ffff0000000000ff0000 XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=1ffff1100779fcb6 RSI=0000000000000001 RDI=0000000000000000 RBP=ffff88803bcfd040 RSP=ffff88803c2d7cc0 R8 =ffff88801a219564 R9 =ffff88801a218007 R10=ffffed1003443000 R11=0000000000000001 R12=ffff88801a218000 R13=0000000000000001 R14=ffff88801a219540 R15=ffff88801a219566 RIP=ffffffff8447153a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 0000000000000000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe014000e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe014000c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f1203134da4 CR3=000000000d9c0000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f120385844000007f1203857f20 XMM02=00007f12031a106000007f1203482b30 XMM03=00007f120385844000007f1203857f20 XMM04=00007f120369e000000055d63fc46510 XMM05=00007f12031a282000007f120369ef60 XMM06=00007f120385895000007f1203858440 XMM07=00007f1203857f2000007f12031a2120 XMM08=00007f12031a1b1000007f12031a15f0 XMM09=ffffffffffff00ffffff00ffffff00ff XMM10=00002000000000202020002020200000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000