, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  499.639099][ T9192] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  499.719979][ T9172] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  499.728306][ T9172] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  499.741720][ T9172] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  499.750272][ T9172] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  499.809186][ T9172] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  499.817615][ T9172] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  499.829620][ T9172] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  499.837996][ T9172] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:20 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:20 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10000010000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  499.863484][ T9206] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  499.882534][ T9211] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  499.961422][ T9212] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  499.969720][ T9212] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  499.981895][ T9212] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  499.990258][ T9212] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  500.038988][ T9212] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.047379][ T9212] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  500.059235][ T9212] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.067537][ T9212] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:20 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c508)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:20 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:20 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffffffffffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:20 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:20 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x40000100000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  500.100998][ T9212] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.109315][ T9212] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  500.121369][ T9212] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.129951][ T9212] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  500.201068][ T9212] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.209378][ T9212] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  500.221413][ T9212] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.229797][ T9212] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:20 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  500.248519][ T9229] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  500.274321][ T9242] loop4: detected capacity change from 0 to 264192
06:10:20 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:20 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe0ffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:20 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  500.301937][ T9239] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  500.336149][ T9248] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:20 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  500.395953][ T9222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.404276][ T9222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  500.416150][ T9222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.424453][ T9222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  500.480943][ T9222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.489228][ T9222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  500.502076][ T9222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.510765][ T9222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:20 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x100000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:20 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  500.534956][ T9257] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  500.546725][ T9259] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  500.581707][ T9252] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.590015][ T9252] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  500.602345][ T9252] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.610759][ T9252] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  500.677756][ T9252] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.686079][ T9252] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  500.701969][ T9252] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.710771][ T9252] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  500.727619][ T9262] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  500.748383][ T9266] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  500.802220][ T9252] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.810547][ T9252] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  500.823448][ T9252] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.831897][ T9252] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  500.884900][ T9252] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.893217][ T9252] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  500.905051][ T9252] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  500.913349][ T9252] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  500.936710][ T9270] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:21 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7080000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:21 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:21 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x200000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:21 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:21 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c509)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:21 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:21 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:21 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  501.123435][ T9279] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  501.140168][ T9284] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  501.156616][ T9283] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  501.200841][ T9280] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.202834][ T9296] loop4: detected capacity change from 0 to 264192
[  501.209418][ T9280] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  501.228269][ T9280] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.236938][ T9280] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  501.294732][ T9280] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.303067][ T9280] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  501.315675][ T9280] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.323981][ T9280] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:21 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:21 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x400000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:21 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  501.341334][ T9297] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  501.368439][ T9291] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:21 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  501.421794][ T9306] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:21 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  501.468949][ T9303] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.477314][ T9303] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  501.492674][ T9303] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.501002][ T9303] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  501.563229][ T9303] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.571639][ T9303] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  501.592459][ T9303] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.600790][ T9303] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  501.616180][ T9311] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  501.627889][ T9317] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  501.650021][ T9321] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:22 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x403000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:22 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:22 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  501.663373][ T9320] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  501.727028][ T9313] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.735556][ T9313] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  501.747716][ T9313] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.756048][ T9313] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  501.824848][ T9313] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.833212][ T9313] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  501.848865][ T9313] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.857161][ T9313] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  501.871831][ T9329] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  501.910066][ T9331] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  501.951700][ T9325] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.960125][ T9325] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  501.972054][ T9325] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  501.981256][ T9325] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:22 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c50d)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:22 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:22 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:22 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:22 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  502.041776][ T9325] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.050490][ T9325] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  502.062696][ T9325] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.071060][ T9325] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  502.115227][ T9325] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.123702][ T9325] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  502.136202][ T9325] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.144610][ T9325] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  502.194743][ T9325] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.203232][ T9325] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  502.215022][ T9325] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.215949][ T9350] loop4: detected capacity change from 0 to 264192
[  502.223305][ T9325] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:22 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  502.253595][ T9341] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:22 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x600000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:22 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  502.300533][ T9345] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  502.324489][ T9360] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  502.359442][ T9337] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.367828][ T9337] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  502.380464][ T9337] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.388725][ T9337] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  502.458295][ T9337] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.466656][ T9337] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  502.482600][ T9337] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.490901][ T9337] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:22 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  502.508651][ T9362] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  502.520591][ T9366] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:22 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x700000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:23 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:23 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  502.583727][ T9372] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  502.650101][ T9369] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.658405][ T9369] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  502.674607][ T9369] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.683115][ T9369] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  502.748394][ T9369] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.756880][ T9369] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  502.769098][ T9369] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.777453][ T9369] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  502.792584][ T9376] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  502.834006][ T9382] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  502.871145][ T9378] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.879925][ T9378] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  502.892043][ T9378] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.900342][ T9378] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  502.953404][ T9378] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.961995][ T9378] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  502.973889][ T9378] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  502.982170][ T9378] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:23 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c50e)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:23 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:23 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:23 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:23 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  503.018214][ T9378] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.026514][ T9378] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  503.039753][ T9378] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.048007][ T9378] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  503.107675][ T9378] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.116046][ T9378] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  503.128180][ T9378] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.136905][ T9378] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:23 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  503.153518][ T9391] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  503.171362][ T9400] loop4: detected capacity change from 0 to 264192
06:10:23 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:23 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x900000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  503.199105][ T9397] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  503.214819][ T9410] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  503.261007][ T9403] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.269498][ T9403] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  503.281060][ T9403] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.289466][ T9403] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  503.348897][ T9403] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.357216][ T9403] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  503.372699][ T9403] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.381340][ T9403] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:23 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  503.398736][ T9414] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  503.410398][ T9417] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:23 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:23 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:23 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  503.441989][ T9421] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  503.493165][ T9403] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.501719][ T9403] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  503.513561][ T9403] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.521836][ T9403] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  503.575702][ T9403] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.584048][ T9403] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  503.598555][ T9403] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.606892][ T9403] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  503.645350][ T9428] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  503.658222][ T9431] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  503.685166][ T9424] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.693698][ T9424] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  503.706061][ T9424] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.714388][ T9424] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  503.780525][ T9424] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.788835][ T9424] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  503.800655][ T9424] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.808957][ T9424] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  503.823983][ T9435] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  503.835686][ T9436] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  503.879624][ T9424] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.887926][ T9424] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  503.902175][ T9424] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.910480][ T9424] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:24 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c510)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:24 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7402, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:24 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:24 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:24 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:24 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  503.963420][ T9424] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.971946][ T9424] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  503.984345][ T9424] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  503.992667][ T9424] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:24 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  504.054572][ T9449] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  504.066004][ T9451] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:24 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  504.099321][ T9460] loop4: detected capacity change from 0 to 264192
[  504.102150][ T9453] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  504.124759][ T9458] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:24 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  504.158075][ T9448] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.166394][ T9448] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  504.195840][ T9448] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.204192][ T9448] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  504.262185][ T9448] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.270610][ T9448] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  504.283850][ T9448] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.292150][ T9448] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:24 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:24 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  504.318474][ T9471] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  504.341387][ T9472] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:24 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  504.373307][ T9477] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  504.393904][ T9479] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  504.457881][ T9474] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.466525][ T9474] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  504.485038][ T9474] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.493448][ T9474] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  504.545108][ T9474] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.553724][ T9474] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  504.565873][ T9474] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.574349][ T9474] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  504.619658][ T9474] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.627952][ T9474] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  504.645501][ T9474] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.653820][ T9474] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  504.707111][ T9474] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.715422][ T9474] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  504.733780][ T9474] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  504.742090][ T9474] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:25 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c511)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:25 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:25 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:25 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:25 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a01, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:25 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  504.964242][ T9499] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  504.987589][ T9503] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:25 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  505.003595][ T9504] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  505.028266][ T9510] loop4: detected capacity change from 0 to 264192
[  505.031138][ T9498] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.043100][ T9498] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  505.056284][ T9498] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.064574][ T9498] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  505.121822][ T9498] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.130147][ T9498] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  505.150635][ T9498] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.158941][ T9498] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:25 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:25 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  505.188749][ T9509] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  505.208188][ T9517] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  505.230856][ T9498] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:25 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  505.239165][ T9498] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  505.250929][ T9498] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.259215][ T9498] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  505.317966][ T9498] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.326727][ T9498] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  505.338217][ T9498] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.346605][ T9498] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:25 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  505.360692][ T9520] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:25 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  505.389037][ T9525] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  505.425254][ T9532] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  505.462681][ T9523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.471026][ T9523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  505.488537][ T9523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.496964][ T9523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  505.559811][ T9523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.568127][ T9523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  505.579755][ T9523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.588157][ T9523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  505.603406][ T9534] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  505.636138][ T9523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.644521][ T9523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  505.656405][ T9523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.664784][ T9523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  505.715884][ T9523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.724286][ T9523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  505.736446][ T9523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.744734][ T9523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  505.760012][ T9537] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:26 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c560)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:26 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:26 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:26 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:26 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:26 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  505.896355][ T9549] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  505.918343][ T9551] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:26 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x25}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  505.936002][ T9553] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  505.963446][ T9561] loop4: detected capacity change from 0 to 264192
[  505.973568][ T9546] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  505.981971][ T9546] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  505.994071][ T9546] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.002476][ T9546] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  506.063022][ T9546] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.071518][ T9546] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  506.091396][ T9546] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.099774][ T9546] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:26 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1200000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:26 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:26 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  506.118217][ T9558] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  506.147199][ T9568] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:26 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  506.190876][ T9571] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:26 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  506.234341][ T9577] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  506.297240][ T9572] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.306041][ T9572] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  506.318464][ T9572] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.326934][ T9572] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  506.383852][ T9572] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.392201][ T9572] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  506.403956][ T9572] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.412347][ T9572] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  506.430213][ T9586] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  506.499291][ T9572] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.507794][ T9572] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  506.519554][ T9572] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.528457][ T9572] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  506.580323][ T9572] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.589148][ T9572] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  506.601201][ T9572] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.609482][ T9572] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:27 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:27 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:27 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:27 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2500000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:27 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5a0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:27 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  506.840408][ T9601] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  506.862604][ T9600] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.870889][ T9600] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  506.886683][ T9600] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.895173][ T9600] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  506.955200][ T9600] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.955683][ T9612] loop4: detected capacity change from 0 to 264192
[  506.963557][ T9600] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  506.981557][ T9600] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  506.990009][ T9600] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:27 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2700000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  507.021230][ T9603] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  507.054960][ T9596] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.063314][ T9596] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  507.086461][ T9596] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.094807][ T9596] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  507.152280][ T9596] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.160620][ T9596] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  507.173423][ T9596] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.181879][ T9596] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:27 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:27 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7402, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  507.197303][ T9607] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  507.211473][ T9618] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:27 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  507.263037][ T9596] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.271713][ T9596] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  507.283647][ T9596] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.291923][ T9596] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:27 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3c01000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  507.345427][ T9596] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.353739][ T9596] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  507.365703][ T9596] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.374331][ T9596] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:27 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  507.399418][ T9623] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  507.421344][ T9630] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:27 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33140000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  507.441907][ T9634] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  507.468242][ T9626] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.476564][ T9626] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  507.489019][ T9626] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.497327][ T9626] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  507.562812][ T9626] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.571133][ T9626] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  507.583469][ T9626] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.591797][ T9626] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:28 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  507.618899][ T9639] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  507.637341][ T9641] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:28 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  507.679507][ T9626] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.688071][ T9626] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  507.700064][ T9626] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.708936][ T9626] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  507.765073][ T9626] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.773475][ T9626] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  507.786282][ T9626] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.794574][ T9626] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:28 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  507.812765][ T9645] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  507.829503][ T9647] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:28 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5c0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:28 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34140000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:28 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:28 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:28 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x60}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  507.869822][ T9656] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  507.917816][ T9652] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.926228][ T9652] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  507.943014][ T9652] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  507.951844][ T9652] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  508.011368][ T9652] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.019964][ T9652] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  508.035353][ T9652] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.043898][ T9652] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  508.049161][ T9672] loop4: detected capacity change from 0 to 264192
[  508.062075][ T9664] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  508.100757][ T9671] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:28 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6000000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:28 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:28 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x68}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:28 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  508.118774][ T9677] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  508.136981][ T9676] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  508.169612][ T9659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.177993][ T9659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  508.190286][ T9659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.198639][ T9659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  508.252744][ T9659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.261209][ T9659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  508.273550][ T9659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.282879][ T9659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:28 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6800000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:28 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  508.305846][ T9685] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  508.317813][ T9688] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  508.332527][ T9690] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  508.379373][ T9659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.387754][ T9659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  508.401289][ T9659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.409793][ T9659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  508.466913][ T9659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.475423][ T9659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  508.487000][ T9659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.495472][ T9659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:28 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a01, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  508.509650][ T9691] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  508.528535][ T9695] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  508.556656][ T9701] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  508.612157][ T9696] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.620815][ T9696] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  508.632724][ T9696] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.640998][ T9696] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  508.693182][ T9696] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.701575][ T9696] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  508.713823][ T9696] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.722087][ T9696] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  508.757044][ T9696] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.765461][ T9696] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  508.777400][ T9696] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.785939][ T9696] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:29 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:29 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:29 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:29 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  508.837986][ T9696] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.846315][ T9696] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  508.858434][ T9696] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  508.866709][ T9696] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:29 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:29 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5c1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:29 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7400000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  508.944985][ T9717] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  508.956260][ T9710] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  508.968474][ T9719] loop4: detected capacity change from 0 to 264192
[  508.975156][ T9721] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:29 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  508.997915][ T9708] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.006220][ T9708] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  509.040225][ T9708] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.048532][ T9708] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  509.118717][ T9708] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.127074][ T9708] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  509.142563][ T9708] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.150869][ T9708] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:29 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  509.166481][ T9725] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  509.181473][ T9733] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:29 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:29 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a00000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:29 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  509.244717][ T9738] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  509.257828][ T9741] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:29 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  509.302317][ T9736] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.310631][ T9736] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  509.324366][ T9736] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.332722][ T9736] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  509.389361][ T9736] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.397666][ T9736] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  509.414670][ T9736] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.423005][ T9736] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:29 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:29 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:29 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  509.447453][ T9747] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  509.475720][ T9750] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  509.508801][ T9745] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.517112][ T9745] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  509.529044][ T9745] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.537421][ T9745] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  509.603962][ T9745] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.612269][ T9745] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  509.637916][ T9745] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:30 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x13c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  509.646450][ T9745] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  509.662401][ T9755] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  509.688910][ T9760] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:30 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5c3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:30 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  509.734148][ T9756] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.742534][ T9756] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  509.754827][ T9756] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.763270][ T9756] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  509.832247][ T9756] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.840896][ T9756] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  509.852551][ T9756] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  509.860955][ T9756] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:30 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  509.880994][ T9766] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  509.893082][ T9776] loop4: detected capacity change from 0 to 264192
[  509.893623][ T9764] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:30 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8d08000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:30 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  509.949267][ T9780] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:30 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1ba}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  510.001312][ T9769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.009647][ T9769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  510.021842][ T9769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.030221][ T9769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  510.088855][ T9769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.097195][ T9769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  510.109296][ T9769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.117621][ T9769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  510.141315][ T9781] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  510.154686][ T9790] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  510.183316][ T9769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.191779][ T9769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  510.203616][ T9769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.211988][ T9769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:30 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  510.266378][ T9769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.274767][ T9769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  510.286539][ T9769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.294837][ T9769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  510.338939][ T9793] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:30 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:30 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xba01000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  510.385213][ T9791] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:30 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2c0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:30 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  510.473165][ T9796] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.481488][ T9796] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  510.493172][ T9796] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.501589][ T9796] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  510.566624][ T9796] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.575114][ T9796] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  510.642649][ T9796] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.650971][ T9796] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:31 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5c4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  510.741204][ T9807] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  510.763105][ T9806] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  510.788117][ T9796] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.796648][ T9796] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  510.808370][ T9796] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.816761][ T9796] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  510.869857][ T9796] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.872170][ T9818] loop4: detected capacity change from 0 to 264192
[  510.878140][ T9796] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  510.878234][ T9796] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  510.904514][ T9796] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:31 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:31 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc002000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  510.932180][ T9810] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  510.943804][ T9813] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:31 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:31 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:31 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  511.042211][ T9824] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.051478][ T9824] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  511.067908][ T9824] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.076230][ T9824] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  511.136063][ T9824] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.144379][ T9824] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  511.157078][ T9824] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.165377][ T9824] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  511.182906][ T9833] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  511.194682][ T9834] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  511.220575][ T9837] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:31 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x304}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:31 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:31 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  511.232527][ T9836] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  511.303506][ T9832] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.311816][ T9832] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  511.323982][ T9832] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.332348][ T9832] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  511.390115][ T9832] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.398460][ T9832] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  511.426323][ T9832] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.434641][ T9832] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  511.454486][ T9840] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:31 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe83a1b0000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  511.479918][ T9846] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  511.504167][ T9842] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.512677][ T9842] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  511.525059][ T9842] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.533342][ T9842] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  511.590224][ T9842] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.598817][ T9842] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  511.615477][ T9842] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.623781][ T9842] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:32 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:32 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  511.641477][ T9847] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  511.664018][ T9848] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:32 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5c6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:32 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x403}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  511.729251][ T9842] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.738011][ T9842] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  511.749869][ T9842] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.758113][ T9842] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  511.829489][ T9842] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.838052][ T9842] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  511.857846][ T9842] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.866159][ T9842] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  511.877706][ T9864] loop4: detected capacity change from 0 to 264192
06:10:32 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  511.925293][ T9863] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  511.945485][ T9865] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  511.990623][ T9852] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  511.998983][ T9852] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  512.012079][ T9852] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.020391][ T9852] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  512.080903][ T9852] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.089316][ T9852] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  512.101698][ T9852] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.110001][ T9852] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:32 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf400000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:32 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  512.125811][ T9874] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  512.137705][ T9877] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:32 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  512.216027][ T9852] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.224373][ T9852] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  512.238118][ T9852] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.246535][ T9852] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:32 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  512.304145][ T9852] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.312597][ T9852] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  512.327242][ T9852] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.335564][ T9852] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:32 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  512.373708][ T9882] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  512.385722][ T9885] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  512.425686][ T9890] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  512.464281][ T9887] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:32 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  512.472810][ T9887] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  512.486303][ T9887] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.494653][ T9887] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  512.551068][ T9887] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.559427][ T9887] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  512.571847][ T9887] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.580398][ T9887] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:33 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf6ffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  512.596866][ T9891] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:33 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:33 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  512.643998][ T9898] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:33 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5c7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  512.687537][ T9894] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.695926][ T9894] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  512.709618][ T9894] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.717963][ T9894] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  512.787641][ T9894] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.796186][ T9894] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  512.812610][ T9894] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.821360][ T9894] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:33 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  512.838430][ T9901] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  512.853568][ T9903] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  512.870244][ T9914] loop4: detected capacity change from 0 to 264192
06:10:33 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:33 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xfeffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:33 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  512.898782][ T9917] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  512.970574][ T9907] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.978870][ T9907] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  512.990381][ T9907] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  512.998618][ T9907] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  513.065190][ T9907] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.073706][ T9907] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  513.090756][ T9907] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.099252][ T9907] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  513.114006][ T9922] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  513.135487][ T9931] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  513.149156][ T9932] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:33 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe83a1b00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  513.172952][ T9907] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.181427][ T9907] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  513.194933][ T9907] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.203257][ T9907] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  513.270758][ T9907] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.279111][ T9907] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  513.291514][ T9907] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.299807][ T9907] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:33 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:33 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:33 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  513.317993][ T9934] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  513.332112][ T9937] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  513.358838][ T9939] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:33 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffff7f00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:33 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  513.404761][ T9940] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:33 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffffff00000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  513.456985][ T9950] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  513.473338][ T9954] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  513.516998][ T9941] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.525375][ T9941] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  513.538631][ T9941] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.547043][ T9941] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  513.604798][ T9941] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.613172][ T9941] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  513.627710][ T9941] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.636031][ T9941] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:34 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5c8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:34 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:34 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:34 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  513.653811][ T9956] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  513.724544][ T9941] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.733238][ T9941] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  513.744964][ T9941] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.753917][ T9941] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  513.809427][ T9941] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.817984][ T9941] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  513.830444][ T9974] loop4: detected capacity change from 0 to 264192
[  513.830722][ T9941] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.845262][ T9941] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:34 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  513.868882][ T9967] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  513.897784][ T9966] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:34 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffffffffffffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:34 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  513.923092][ T9978] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  513.971015][ T9965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  513.979400][ T9965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  513.992309][ T9965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.000841][ T9965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  514.060837][ T9965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.069246][ T9965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  514.084686][ T9965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.093016][ T9965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:34 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb071000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  514.119081][ T9982] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.130863][ T9986] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.171556][ T9965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.179872][ T9965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  514.192316][ T9965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.200631][ T9965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  514.259578][ T9965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.268158][ T9965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  514.281007][ T9965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.289388][ T9965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:34 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:34 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  514.327050][ T9990] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:34 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:34 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  514.370405][ T9992] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.407631][ T9997] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.447285][T10003] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.460176][T10005] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.482376][T10006] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.517963][ T9995] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.526289][ T9995] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  514.538070][ T9995] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.546611][ T9995] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  514.597066][ T9995] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.605497][ T9995] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  514.618153][ T9995] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.626637][ T9995] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:35 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5c9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:35 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:35 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:35 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:35 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  514.643143][T10008] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.709848][T10018] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.734177][ T9998] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.742786][ T9998] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  514.754502][ T9998] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.762791][ T9998] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  514.812745][ T9998] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.821064][ T9998] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  514.832849][T10027] loop4: detected capacity change from 0 to 264192
[  514.833795][ T9998] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  514.847636][ T9998] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:35 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:35 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  514.868976][T10019] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.889116][T10020] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.902039][T10023] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:35 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:35 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  514.957066][T10035] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.969273][T10038] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  514.993623][T10042] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.023737][T10016] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.032051][T10016] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  515.045032][T10016] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.053333][T10016] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  515.108336][T10016] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.116663][T10016] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  515.129047][T10016] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.137321][T10016] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:35 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:35 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff070000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  515.152322][T10041] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.166691][T10044] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.188766][T10045] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:35 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  515.225581][T10046] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.272834][T10053] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.287846][T10051] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.326362][T10047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.334684][T10047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  515.347151][T10047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.355483][T10047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  515.415082][T10047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.423429][T10047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  515.434938][T10047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.443200][T10047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  515.465327][T10058] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.498966][T10047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.507338][T10047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  515.519123][T10047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.527457][T10047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  515.578162][T10047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.586544][T10047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  515.598264][T10047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.606621][T10047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:36 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:36 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:36 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:36 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:36 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5ca)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:36 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  515.694401][T10067] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.719225][T10073] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.730745][T10072] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:36 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  515.742632][T10075] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.766801][T10077] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.778524][T10082] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:36 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  515.783558][T10084] loop4: detected capacity change from 0 to 264192
[  515.823504][T10069] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.831818][T10069] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  515.843755][T10069] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.852031][T10069] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  515.913500][T10069] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.922069][T10069] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  515.935957][T10069] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  515.944255][T10069] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:36 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:36 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  515.959495][T10083] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  515.973371][T10090] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.001002][T10093] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:36 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:36 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  516.049020][T10099] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:36 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  516.099161][T10100] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.125432][T10103] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:36 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  516.146237][T10107] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.190810][T10104] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.199093][T10104] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  516.211899][T10104] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.220178][T10104] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  516.277497][T10104] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.285805][T10104] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  516.300356][T10104] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.308639][T10104] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:36 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  516.326509][T10110] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.347721][T10111] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:36 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  516.378414][T10113] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.434230][T10118] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.450713][T10120] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.479311][T10121] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.508266][T10116] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.516617][T10116] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  516.528750][T10116] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.537006][T10116] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:37 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5cb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:37 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:37 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:37 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  516.589411][T10116] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.597687][T10116] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  516.609874][T10116] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.618282][T10116] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:37 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  516.661090][T10124] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.672361][T10132] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.705502][T10140] loop4: detected capacity change from 0 to 264192
[  516.716162][T10129] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.724670][T10129] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  516.736333][T10129] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.744719][T10129] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  516.808221][T10129] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.816701][T10129] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  516.831326][T10129] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  516.839966][T10129] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:37 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  516.874124][T10133] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.887817][T10138] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.899644][T10137] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:37 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:37 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:37 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:37 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  516.938716][T10146] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  516.976566][T10151] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.014506][T10147] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.023379][T10147] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  517.035916][T10147] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.044515][T10147] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  517.113734][T10147] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.122196][T10147] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  517.140585][T10147] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.148881][T10147] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  517.167838][T10156] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.189359][T10160] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.201344][T10161] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:37 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  517.215574][T10163] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.257340][T10147] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.265661][T10147] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  517.278130][T10147] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.286608][T10147] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:37 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  517.343571][T10147] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.351874][T10147] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  517.366414][T10147] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.374739][T10147] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  517.409212][T10164] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.438684][T10166] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.454254][T10169] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.494830][T10178] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:37 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5cc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:37 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:37 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:37 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:37 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  517.530822][T10172] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.539239][T10172] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  517.552358][T10172] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.561631][T10172] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  517.621755][T10172] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.630072][T10172] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  517.646184][T10172] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.654503][T10172] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  517.670515][T10188] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.682391][T10194] loop4: detected capacity change from 0 to 264192
[  517.698671][T10191] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:38 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:38 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  517.720081][T10192] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.736034][T10196] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.774846][T10181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.783204][T10181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  517.795839][T10181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.804215][T10181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  517.878556][T10181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  517.887095][T10181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  517.916772][T10181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:38 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:38 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  517.925105][T10181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  517.940633][T10200] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.952432][T10201] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  517.964581][T10207] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:38 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:38 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  518.002073][T10213] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  518.018857][T10211] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  518.030137][T10212] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  518.083437][T10181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.091770][T10181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  518.103873][T10181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.112163][T10181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  518.165205][T10181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.173741][T10181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  518.185557][T10181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.194031][T10181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:38 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  518.208463][T10214] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  518.247262][T10220] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  518.258438][T10221] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  518.274645][T10226] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  518.299776][T10222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.308197][T10222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  518.321055][T10222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.330292][T10222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  518.395426][T10222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.403773][T10222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  518.416201][T10222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.424687][T10222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:38 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:38 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:38 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:38 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:38 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5cd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  518.468705][T10222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.477186][T10222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  518.489798][T10222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.498512][T10222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  518.567655][T10222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.576080][T10222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  518.596297][T10222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.604995][T10222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:39 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  518.628069][T10236] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  518.638624][T10244] loop4: detected capacity change from 0 to 264192
[  518.642757][T10237] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:39 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  518.698625][T10239] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  518.720023][T10250] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  518.734921][T10252] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:39 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  518.769675][T10234] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.778162][T10234] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  518.791658][T10234] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.800089][T10234] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  518.875337][T10234] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.884149][T10234] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  518.896343][T10234] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  518.904715][T10234] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:39 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  518.922590][T10254] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  518.945122][T10257] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:39 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:39 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:39 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  518.981369][T10259] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.012028][T10265] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.079266][T10262] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.088291][T10262] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  519.100317][T10262] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.108594][T10262] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  519.162817][T10262] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.171433][T10262] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  519.183735][T10262] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.192129][T10262] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  519.206791][T10267] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.218726][T10268] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.239793][T10274] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:39 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:39 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:39 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  519.258586][T10276] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.290527][T10269] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.299036][T10269] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  519.310780][T10269] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.319059][T10269] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  519.386908][T10269] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.395221][T10269] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  519.417867][T10269] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:39 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5ce)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:39 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  519.426617][T10269] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  519.441544][T10278] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.453061][T10279] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.493450][T10285] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.509738][T10290] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:39 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74020000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:40 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  519.540077][T10297] loop4: detected capacity change from 0 to 264192
[  519.541620][T10292] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.620676][T10281] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.629911][T10281] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  519.642612][T10281] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.651394][T10281] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  519.706239][T10281] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.714674][T10281] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  519.727650][T10281] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.736467][T10281] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:40 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  519.752031][T10293] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.791753][T10307] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:40 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:40 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  519.803168][T10305] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.843044][T10299] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.851815][T10299] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  519.864076][T10299] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.872371][T10299] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  519.932626][T10299] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.942455][T10299] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  519.955131][T10299] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  519.963499][T10299] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:40 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  519.978879][T10310] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  519.990104][T10311] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:40 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  520.024328][T10317] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.040757][T10319] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.065458][T10299] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.073790][T10299] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  520.085957][T10299] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.094249][T10299] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  520.162394][T10299] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.170745][T10299] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  520.183202][T10299] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.191597][T10299] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:40 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:40 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  520.208357][T10321] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.228393][T10322] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.248157][T10324] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:40 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xba01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  520.269775][T10326] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.300098][T10335] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.316470][T10336] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.341390][T10330] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.349705][T10330] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:10:40 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5cf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:40 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x25}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:40 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  520.362750][T10330] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.371232][T10330] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  520.440902][T10330] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.449201][T10330] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  520.460714][T10330] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.468998][T10330] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:40 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:40 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  520.487858][T10337] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.499788][T10345] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.511013][T10348] loop4: detected capacity change from 0 to 264192
[  520.526035][T10346] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:41 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:41 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a010000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  520.563973][T10359] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.579167][T10356] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:41 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:41 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  520.630950][T10360] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.647051][T10361] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.699006][T10352] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.707518][T10352] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  520.720093][T10352] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.728392][T10352] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  520.787552][T10352] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.795876][T10352] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  520.813283][T10352] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.821599][T10352] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:41 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  520.847674][T10368] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.858998][T10372] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.870708][T10371] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  520.902962][T10365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.911262][T10365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  520.922790][T10365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  520.931093][T10365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  520.997313][T10365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.005664][T10365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  521.017699][T10365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.025997][T10365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:41 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:41 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  521.040736][T10374] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.052127][T10375] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.070124][T10373] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.128423][T10365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.136828][T10365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  521.148963][T10365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.157349][T10365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  521.211240][T10365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.219614][T10365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  521.231567][T10365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.239943][T10365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  521.254738][T10382] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.269867][T10385] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.292239][T10388] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:41 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:41 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:41 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:41 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:41 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5d0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:41 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  521.318869][T10391] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.379177][T10402] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.401867][T10406] loop4: detected capacity change from 0 to 264192
[  521.402647][T10404] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:41 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1b3ae8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:41 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  521.424975][T10405] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.440931][T10409] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.455153][T10413] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.483467][T10397] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.493187][T10397] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  521.506645][T10397] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.515761][T10397] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  521.585535][T10397] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.593943][T10397] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  521.606122][T10397] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.614640][T10397] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  521.630102][T10414] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.645707][T10420] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:42 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:42 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  521.675164][T10419] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:42 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  521.711893][T10422] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.733708][T10424] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:42 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x60}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:42 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  521.766803][T10429] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.815177][T10427] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.823790][T10427] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  521.836402][T10427] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.844692][T10427] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  521.905972][T10427] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.914362][T10427] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  521.927546][T10427] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  521.935845][T10427] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:42 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  521.962286][T10436] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.973643][T10435] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  521.994246][T10438] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:42 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  522.028404][T10431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.036718][T10431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  522.067031][T10431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.075384][T10431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  522.136406][T10431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.145356][T10431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  522.160472][T10431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.168917][T10431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:42 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x68}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:42 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5d1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  522.185002][T10439] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  522.197409][T10441] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  522.215790][T10442] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:42 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:42 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  522.260594][T10452] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  522.276390][T10450] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:42 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  522.304925][T10445] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.313688][T10445] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  522.326213][T10445] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.334756][T10445] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  522.394756][T10463] loop4: detected capacity change from 0 to 264192
[  522.396021][T10445] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.409756][T10445] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  522.423390][T10445] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.431807][T10445] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:42 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  522.455399][T10454] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  522.466720][T10458] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  522.493059][T10466] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:42 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:42 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1004000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  522.513211][T10471] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  522.568500][T10457] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.577036][T10457] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  522.590066][T10457] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.600762][T10457] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  522.665532][T10457] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.673977][T10457] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  522.686413][T10457] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.694730][T10457] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:43 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  522.710663][T10476] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  522.722158][T10477] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:43 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:43 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74020000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  522.761061][T10480] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  522.776787][T10481] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  522.810369][T10475] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.818787][T10475] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  522.831320][T10475] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.839637][T10475] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  522.911018][T10475] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.919355][T10475] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  522.931372][T10475] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  522.939989][T10475] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:43 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  522.955454][T10483] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  522.967591][T10484] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  522.979589][T10489] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:43 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  523.002966][T10491] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  523.028462][T10492] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  523.080052][T10488] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.088365][T10488] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  523.103731][T10488] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.112228][T10488] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  523.176712][T10488] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.185028][T10488] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  523.199659][T10488] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.207934][T10488] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:43 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5d2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:43 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:43 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  523.223352][T10494] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  523.259494][T10502] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:43 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:43 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  523.287579][T10495] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.296389][T10495] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  523.308339][T10495] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.316832][T10495] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  523.376000][T10495] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.384575][T10495] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  523.396382][T10514] loop4: detected capacity change from 0 to 264192
[  523.419226][T10495] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.427608][T10495] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  523.451889][T10505] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  523.463420][T10506] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:43 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:43 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  523.488552][T10519] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  523.503159][T10522] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  523.527222][T10521] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:43 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  523.567921][T10511] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.576832][T10511] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  523.589618][T10511] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.598171][T10511] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  523.670683][T10511] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.679292][T10511] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  523.696035][T10511] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.704344][T10511] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  523.720954][T10525] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  523.732570][T10528] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:44 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:44 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  523.764579][T10531] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  523.786531][T10532] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  523.817475][T10511] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.826147][T10511] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  523.838527][T10511] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.846870][T10511] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:44 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a010000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  523.918171][T10511] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.926673][T10511] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  523.939002][T10511] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  523.947573][T10511] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:44 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  523.980303][T10535] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  523.991718][T10536] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.012429][T10538] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.046672][T10546] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.062218][T10548] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.100605][T10541] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.108930][T10541] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  524.120969][T10541] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.129285][T10541] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:44 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x13c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:44 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:44 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:44 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5d3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  524.188416][T10541] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.196696][T10541] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  524.208262][T10541] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.216797][T10541] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:44 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  524.257266][T10557] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.282037][T10555] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.294509][T10565] loop4: detected capacity change from 0 to 264192
06:10:44 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  524.308500][T10558] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.335890][T10564] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:44 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1ba}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  524.357008][T10569] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.377887][T10573] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:44 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  524.417426][T10571] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.425820][T10571] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  524.454274][T10571] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:44 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  524.462687][T10571] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  524.521934][T10571] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.530375][T10571] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  524.547166][T10571] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.555517][T10571] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:45 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  524.573607][T10577] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.594057][T10581] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:45 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:45 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2c0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  524.623052][T10580] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.641605][T10586] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.696955][T10588] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.709629][T10589] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.724246][T10593] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:45 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:45 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  524.757385][T10583] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.765695][T10583] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  524.779536][T10583] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.787879][T10583] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  524.846626][T10583] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.855281][T10583] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  524.871202][T10583] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.879744][T10583] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:45 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  524.904602][T10596] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.916208][T10599] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.934584][T10600] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  524.983371][T10594] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  524.991717][T10594] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  525.004590][T10594] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.012883][T10594] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:45 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:45 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5d4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  525.069881][T10594] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.078382][T10594] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  525.093929][T10594] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.102239][T10594] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:45 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:45 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  525.125739][T10601] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.137382][T10603] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.149437][T10604] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:45 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x304}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  525.186942][T10614] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.194252][T10621] loop4: detected capacity change from 0 to 264192
[  525.198236][T10617] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.218125][T10619] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.250015][T10594] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.258630][T10594] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  525.273750][T10594] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.282204][T10594] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:45 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  525.337251][T10594] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.345581][T10594] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  525.357712][T10594] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.366085][T10594] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:45 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  525.401798][T10625] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.428385][T10627] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:45 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:45 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  525.457364][T10630] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.499715][T10642] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.511229][T10641] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.524641][T10643] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:45 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x403}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:45 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:46 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  525.540073][T10645] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.568417][T10646] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:46 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  525.604940][T10644] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.613278][T10644] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  525.625135][T10644] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.633437][T10644] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  525.699739][T10644] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.708323][T10644] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  525.727648][T10644] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.736056][T10644] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  525.751399][T10649] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.769631][T10651] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.794223][T10656] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.805418][T10660] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.818631][T10661] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  525.851347][T10655] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.859801][T10655] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  525.872733][T10655] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.881402][T10655] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  525.943115][T10655] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.951423][T10655] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  525.963336][T10655] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  525.971601][T10655] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  525.987276][T10662] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:46 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5d5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:46 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:46 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:46 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:46 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  526.017873][T10655] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  526.026173][T10655] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  526.045626][T10655] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  526.054048][T10655] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  526.115196][T10655] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  526.123557][T10655] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  526.134953][T10655] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  526.143311][T10655] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:46 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  526.157329][T10672] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  526.182137][T10676] loop4: detected capacity change from 0 to 264192
[  526.184920][T10667] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  526.201604][T10673] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  526.214637][T10677] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  526.230163][T10685] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  526.257184][T10666] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:46 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:46 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  526.265511][T10666] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  526.278030][T10666] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  526.286400][T10666] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  526.357369][T10666] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  526.365775][T10666] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  526.378185][T10666] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  526.386470][T10666] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:46 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  526.400802][T10686] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  526.427728][T10694] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:46 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:46 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  526.450076][T10693] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:46 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  526.486971][T10702] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  526.500634][T10700] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  526.522725][T10706] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  526.571400][T10699] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  526.579721][T10699] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  526.592672][T10699] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  526.601052][T10699] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  526.654471][T10699] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  526.662904][T10699] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  526.674995][T10699] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  526.683463][T10699] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  526.708297][T10710] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  526.721910][T10709] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  526.760133][T10714] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:47 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:47 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:47 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:47 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:47 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5d6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:47 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  527.039401][T10725] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.050822][T10728] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.075256][T10735] loop4: detected capacity change from 0 to 264192
06:10:47 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x88d}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  527.082198][T10727] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.094087][T10730] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.126575][T10726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.134902][T10726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  527.147502][T10726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.156418][T10726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  527.227973][T10726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.236285][T10726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  527.248426][T10726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.257016][T10726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:47 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:47 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  527.271607][T10737] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.286482][T10740] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.313013][T10743] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:47 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:47 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:47 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  527.380386][T10750] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.396995][T10749] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.422004][T10746] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.430306][T10746] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  527.442387][T10746] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.451222][T10746] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  527.517232][T10746] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.525972][T10746] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  527.539234][T10746] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.547707][T10746] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:48 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:48 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  527.575681][T10756] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.587400][T10757] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.599290][T10759] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.613527][T10760] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.660361][T10746] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.668851][T10746] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  527.681168][T10746] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.689735][T10746] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  527.747696][T10746] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.756308][T10746] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  527.772595][T10746] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.781000][T10746] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:48 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:48 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  527.799295][T10761] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.829475][T10763] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.860963][T10766] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.874045][T10773] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:48 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5d7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:48 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:48 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:48 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x11000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  527.920158][T10776] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  527.971522][T10769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  527.980845][T10769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  527.994717][T10769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.003584][T10769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  528.015676][T10785] loop4: detected capacity change from 0 to 264192
[  528.098212][T10769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.106850][T10769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  528.120434][T10769] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.130551][T10769] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:48 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  528.148985][T10782] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  528.168901][T10786] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  528.186371][T10793] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  528.217301][T10794] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  528.237054][T10799] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:48 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:48 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x12000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:48 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  528.258638][T10800] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  528.310690][T10774] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.319190][T10774] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  528.331718][T10774] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.340001][T10774] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  528.398767][T10774] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.407181][T10774] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  528.423928][T10774] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.432469][T10774] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:48 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:48 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  528.449751][T10803] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  528.484291][T10806] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  528.510833][T10807] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  528.542550][T10813] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:49 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x274}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  528.559443][T10817] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  528.577710][T10818] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:49 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  528.612106][T10812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.620607][T10812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  528.637994][T10812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.646330][T10812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  528.705547][T10812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.713969][T10812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  528.727401][T10812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.735754][T10812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  528.757413][T10821] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  528.782037][T10823] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:49 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:49 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:49 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:49 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5d8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  528.804421][T10826] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  528.838971][T10812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.847367][T10812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  528.858847][T10812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.867217][T10812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  528.932740][T10812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.941382][T10812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  528.946319][T10841] loop4: detected capacity change from 0 to 264192
[  528.952989][T10812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  528.967838][T10812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:49 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  528.988224][T10827] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.007068][T10834] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:49 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x25000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:49 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  529.042905][T10839] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.066613][T10847] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.095032][T10833] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.103477][T10833] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  529.116432][T10833] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.124846][T10833] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  529.195727][T10833] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.204057][T10833] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  529.217923][T10833] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.226302][T10833] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:49 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  529.251403][T10853] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.262772][T10855] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.281972][T10857] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.318020][T10850] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.326324][T10850] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  529.348250][T10850] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:49 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  529.357787][T10850] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  529.419709][T10850] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.428246][T10850] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  529.447901][T10850] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.456229][T10850] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:49 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x27000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:49 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  529.470796][T10858] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.482402][T10860] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.494551][T10861] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:49 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  529.535349][T10869] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.560868][T10863] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.569261][T10863] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  529.581533][T10863] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.589866][T10863] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  529.649588][T10863] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.657988][T10863] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  529.671725][T10863] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.680019][T10863] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  529.695138][T10870] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.706643][T10871] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.718167][T10872] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:50 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:50 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:50 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5d9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:50 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  529.754435][T10877] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:50 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3c010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  529.802290][T10874] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.810961][T10874] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  529.822805][T10874] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.831177][T10874] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  529.893747][T10874] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.902119][T10874] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  529.916563][T10874] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  529.918177][T10893] loop4: detected capacity change from 0 to 264192
[  529.924866][T10874] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  529.952182][T10881] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.977046][T10890] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  529.988612][T10892] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:50 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:50 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:50 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  530.007997][T10898] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.023027][T10900] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.064262][T10885] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.072580][T10885] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  530.084563][T10885] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.094313][T10885] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  530.157495][T10885] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.165900][T10885] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  530.178343][T10885] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.186607][T10885] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:50 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  530.200734][T10901] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.212737][T10906] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:50 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:50 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x708}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  530.249344][T10909] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.267281][T10910] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.293924][T10902] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.302281][T10902] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  530.314775][T10902] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.323217][T10902] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  530.389927][T10902] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.398269][T10902] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  530.419918][T10902] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.428329][T10902] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:50 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  530.444869][T10913] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.456920][T10914] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.474401][T10918] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:50 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:50 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x48000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  530.507498][T10920] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.555950][T10917] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.564262][T10917] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  530.576722][T10917] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.585016][T10917] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  530.647966][T10917] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.656683][T10917] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  530.680779][T10917] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.689122][T10917] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  530.705021][T10922] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.717194][T10923] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.735223][T10929] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:51 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5da)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:51 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:51 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:51 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:51 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  530.778217][T10933] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.791799][T10934] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  530.836291][T10927] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.845244][T10927] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  530.859692][T10927] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.867996][T10927] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  530.927042][T10927] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.935409][T10927] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  530.947246][T10949] loop4: detected capacity change from 0 to 264192
[  530.955242][T10927] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  530.963666][T10927] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  530.979243][T10936] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.002603][T10948] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.014190][T10946] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:51 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:51 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  531.030808][T10952] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.082405][T10937] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.090855][T10937] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  531.102804][T10937] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.111194][T10937] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  531.178800][T10937] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.187267][T10937] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  531.202729][T10937] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.211088][T10937] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:51 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x60000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:51 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  531.227308][T10954] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.238580][T10955] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.266044][T10961] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:51 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  531.306266][T10957] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.314574][T10957] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  531.334211][T10957] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.342850][T10957] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  531.406670][T10957] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.415245][T10957] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  531.429814][T10957] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.438121][T10957] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:51 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  531.452822][T10965] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.464769][T10964] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.476641][T10966] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:51 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  531.511920][T10971] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.543066][T10972] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.573780][T10968] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.582234][T10968] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  531.594609][T10968] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.603029][T10968] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  531.667617][T10968] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.675935][T10968] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  531.688224][T10968] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.696667][T10968] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  531.711839][T10977] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.738697][T10979] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.770189][T10974] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:52 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5db)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:52 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x68000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:52 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:52 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:52 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  531.778495][T10974] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  531.791111][T10974] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.799980][T10974] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  531.860502][T10974] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.868924][T10974] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  531.881699][T10974] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  531.890383][T10974] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  531.907597][T10986] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.922954][T10995] loop4: detected capacity change from 0 to 264192
[  531.929965][T10991] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.942433][T10988] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:52 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  531.962284][T10998] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  531.992885][T10985] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:52 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  532.001781][T10985] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  532.018312][T10985] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.026621][T10985] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  532.094868][T10985] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.103577][T10985] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  532.120003][T10985] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.128313][T10985] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:52 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:52 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  532.142783][T11000] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.154468][T11001] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.166494][T11007] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.207255][T11010] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.218526][T11013] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.242621][T10985] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:52 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  532.250986][T10985] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  532.265672][T10985] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.274099][T10985] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:52 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  532.330782][T10985] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.339179][T10985] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  532.351885][T10985] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.360193][T10985] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  532.402545][T11014] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.426760][T11015] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:52 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  532.441973][T11017] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.495103][T11022] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.506281][T11027] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.541320][T11024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.549640][T11024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  532.567056][T11024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.575794][T11024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  532.637578][T11024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.646093][T11024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  532.657747][T11024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.666311][T11024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:53 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5dc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:53 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:53 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x74000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:53 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:53 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  532.723911][T11024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.732360][T11024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  532.744234][T11024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.752932][T11024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:53 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  532.822362][T11024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.830718][T11024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  532.843692][T11024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.852274][T11024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  532.893298][T11045] loop4: detected capacity change from 0 to 264192
[  532.894082][T11036] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.916616][T11039] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.929179][T11038] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  532.955505][T11033] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.963850][T11033] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  532.988214][T11033] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  532.996786][T11033] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  533.056435][T11033] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.064878][T11033] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  533.077054][T11033] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.085690][T11033] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:53 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:53 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:53 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  533.110113][T11051] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.121353][T11052] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.142511][T11053] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.189588][T11048] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.197879][T11048] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  533.221147][T11048] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:10:53 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  533.229823][T11048] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  533.299683][T11048] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.308182][T11048] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  533.321132][T11048] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.329484][T11048] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  533.344425][T11056] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.356901][T11059] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.378727][T11064] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:53 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  533.394447][T11065] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.406961][T11066] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:53 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8cffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  533.446804][T11048] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.455213][T11048] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  533.475322][T11048] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.483669][T11048] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  533.543021][T11048] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.551451][T11048] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  533.563610][T11048] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.572022][T11048] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  533.603158][T11068] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.627352][T11071] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.655433][T11072] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.684617][T11077] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.698947][T11078] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:54 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5dd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:54 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:54 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:54 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:54 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xba010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:54 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  533.760090][T11090] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.779670][T11087] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.796894][T11091] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:54 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc0020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  533.809849][T11092] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  533.815683][T11098] loop4: detected capacity change from 0 to 264192
[  533.846390][T11082] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.854924][T11082] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  533.867438][T11082] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.875827][T11082] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  533.944472][T11082] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.952791][T11082] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  533.969231][T11082] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  533.977541][T11082] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:54 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:54 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  534.000539][T11094] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.014430][T11100] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.031836][T11106] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:54 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:54 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  534.067439][T11112] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:54 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe83a1b00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  534.111281][T11113] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.126390][T11114] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.148015][T11116] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.193341][T11109] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.201809][T11109] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  534.214252][T11109] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.222534][T11109] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  534.274073][T11109] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.282369][T11109] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  534.293945][T11109] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.302213][T11109] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  534.328042][T11123] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.339292][T11122] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.367460][T11109] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.375809][T11109] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  534.387605][T11109] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.395908][T11109] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  534.449788][T11109] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.458184][T11109] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  534.470190][T11109] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.478559][T11109] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  534.506475][T11125] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:55 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1433}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:55 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:55 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:55 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:55 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5df)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:55 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  534.670547][T11141] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.682043][T11136] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.695356][T11142] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.711328][T11150] loop4: detected capacity change from 0 to 264192
[  534.722881][T11134] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.731404][T11134] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  534.745414][T11134] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.753809][T11134] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  534.815459][T11134] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.824153][T11134] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  534.836562][T11134] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  534.844973][T11134] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:55 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf6ffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:55 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:55 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8d08}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  534.860634][T11143] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.872005][T11149] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.891225][T11148] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:55 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1434}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:55 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  534.965159][T11158] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  534.979507][T11163] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.003512][T11166] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.020329][T11164] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.039516][T11171] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:55 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfeffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:55 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:55 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xba01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  535.061707][T11172] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.109772][T11161] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.118242][T11161] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  535.130335][T11161] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.138651][T11161] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  535.204552][T11161] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.212962][T11161] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  535.225197][T11161] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.233581][T11161] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:55 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  535.250360][T11175] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.271823][T11179] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:55 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  535.300649][T11178] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.321297][T11183] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.373262][T11185] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.400722][T11186] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.438981][T11181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.447312][T11181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  535.459328][T11181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.467759][T11181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:55 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5e0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:55 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffff7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:55 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:55 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  535.533040][T11181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.541365][T11181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  535.563413][T11181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.571916][T11181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  535.612806][T11197] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.631330][T11198] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.634158][T11203] loop4: detected capacity change from 0 to 264192
[  535.656931][T11181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.665395][T11181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  535.677755][T11181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.686130][T11181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  535.752117][T11181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.760553][T11181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  535.773702][T11181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.782479][T11181] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:56 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:56 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  535.798019][T11199] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.816263][T11205] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:56 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffff8c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:56 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:56 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  535.844958][T11207] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.856357][T11213] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.902472][T11219] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  535.926983][T11209] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.935609][T11209] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  535.947554][T11209] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  535.955960][T11209] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  536.013791][T11209] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.022170][T11209] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  536.034616][T11209] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.043205][T11209] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:56 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18a, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  536.060719][T11224] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.080956][T11223] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:56 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:56 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  536.109529][T11225] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.127451][T11229] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.193870][T11231] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.208092][T11237] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.232393][T11226] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.240741][T11226] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  536.258251][T11226] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.266769][T11226] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  536.320432][T11226] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.328943][T11226] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  536.341243][T11226] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.350444][T11226] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  536.368313][T11238] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:56 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3314}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:56 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:56 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:56 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5e2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:56 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  536.427136][T11226] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.435480][T11226] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  536.449601][T11226] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.457903][T11226] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  536.530020][T11226] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.538607][T11226] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  536.551014][T11226] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.560436][T11226] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:57 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x274, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  536.574264][T11250] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.587274][T11249] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.594163][T11255] loop4: detected capacity change from 0 to 264192
[  536.609820][T11251] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:57 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1b3ae8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:57 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:57 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3414}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  536.648178][T11264] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.661595][T11265] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.673897][T11266] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.718353][T11247] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.726645][T11247] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  536.738539][T11247] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.746854][T11247] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  536.816403][T11247] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.824747][T11247] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  536.847730][T11247] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  536.856180][T11247] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  536.873272][T11272] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.894487][T11273] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:57 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  536.905947][T11274] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.937228][T11277] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  536.956526][T11278] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:57 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:57 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:57 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:57 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  536.978956][T11280] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.026388][T11279] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.034723][T11279] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  537.047782][T11279] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.056244][T11279] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  537.119340][T11279] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.127656][T11279] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  537.156568][T11279] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.165430][T11279] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  537.180835][T11284] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.203198][T11291] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:57 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe0ffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  537.215118][T11292] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.230883][T11294] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.258045][T11279] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.266479][T11279] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  537.278306][T11279] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.286768][T11279] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  537.351895][T11279] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.360252][T11279] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  537.371979][T11279] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.380269][T11279] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  537.394438][T11295] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.421508][T11296] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.439309][T11300] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:57 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5e3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:57 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:57 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:57 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:57 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:57 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  537.459939][T11306] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.515165][T11308] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.523493][T11308] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  537.535378][T11308] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.543711][T11308] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  537.597765][T11308] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.605898][T11324] loop4: detected capacity change from 0 to 264192
[  537.606612][T11308] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  537.625731][T11308] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.634237][T11308] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  537.666847][T11316] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.678020][T11319] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.690013][T11322] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.705313][T11330] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:58 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:58 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000001000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  537.717199][T11331] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.756633][T11308] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.765056][T11308] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  537.776569][T11308] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.784873][T11308] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  537.840343][T11308] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.848655][T11308] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  537.864322][T11308] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  537.872642][T11308] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:58 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  537.887068][T11332] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.916224][T11334] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:58 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:58 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1004000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  537.940317][T11336] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  537.974443][T11343] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:58 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  537.988825][T11345] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  538.005278][T11348] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  538.031570][T11344] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.040523][T11344] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  538.052462][T11344] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.060769][T11344] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  538.116245][T11344] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.124613][T11344] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  538.136199][T11344] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.145472][T11344] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  538.162319][T11350] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  538.192544][T11352] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  538.237031][T11344] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.245447][T11344] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  538.261978][T11344] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.270546][T11344] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  538.326698][T11344] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.335036][T11344] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  538.348246][T11344] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.356536][T11344] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  538.370895][T11355] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:58 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5e5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:58 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:58 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:58 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:58 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:58 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  538.481273][T11366] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  538.493881][T11370] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  538.505466][T11367] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  538.518686][T11371] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:58 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  538.535436][T11379] loop4: detected capacity change from 0 to 264192
[  538.547149][T11365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.555882][T11365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  538.568138][T11365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.576413][T11365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  538.646297][T11365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.654714][T11365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  538.674959][T11365] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.683367][T11365] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:10:59 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  538.702448][T11374] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  538.725499][T11375] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:59 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  538.743502][T11386] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:59 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:59 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  538.785465][T11388] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:59 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  538.827381][T11392] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  538.855576][T11398] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  538.873616][T11399] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  538.907691][T11395] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.916172][T11395] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  538.936690][T11395] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  538.945087][T11395] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  538.998600][T11395] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.007093][T11395] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  539.019250][T11395] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.027556][T11395] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  539.045295][T11403] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  539.066617][T11404] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  539.104993][T11395] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.113395][T11395] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  539.125347][T11395] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.133616][T11395] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  539.184389][T11395] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.192818][T11395] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  539.204777][T11395] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.213111][T11395] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  539.227573][T11406] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:59 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18a, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:59 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:59 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:59 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:10:59 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5e6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:10:59 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  539.413143][T11423] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  539.430008][T11422] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  539.443400][T11432] loop4: detected capacity change from 0 to 264192
[  539.444219][T11426] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:10:59 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x5000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  539.463009][T11428] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  539.487655][T11420] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.495957][T11420] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  539.511332][T11420] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.519733][T11420] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  539.607330][T11420] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.615671][T11420] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  539.628106][T11420] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.636486][T11420] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:00 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x274, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  539.651230][T11435] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  539.665189][T11437] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:00 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7402}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:00 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:00 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  539.698720][T11441] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  539.767727][T11447] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  539.792532][T11448] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:00 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  539.828618][T11442] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.836998][T11442] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  539.849105][T11442] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.857838][T11442] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  539.915533][T11442] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.923925][T11442] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  539.939341][T11442] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  539.947637][T11442] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  539.962399][T11453] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  539.983986][T11455] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  539.995332][T11457] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:00 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:00 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:00 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  540.016898][T11458] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.063142][T11451] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.071602][T11451] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  540.084165][T11451] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.092643][T11451] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  540.153809][T11451] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.162350][T11451] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  540.190147][T11451] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:00 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  540.198662][T11451] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  540.214253][T11459] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.225867][T11465] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:00 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5e8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:00 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:00 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  540.244860][T11466] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.273117][T11471] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.292890][T11470] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.333430][T11461] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.341980][T11461] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  540.353936][T11461] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.362538][T11461] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  540.418434][T11461] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.426724][T11461] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  540.431469][T11486] loop4: detected capacity change from 0 to 264192
[  540.438297][T11461] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.453274][T11461] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:00 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000010000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:00 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  540.468613][T11472] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.480774][T11478] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:00 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  540.515175][T11487] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.539804][T11491] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.578388][T11481] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.586800][T11481] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  540.598992][T11481] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.607596][T11481] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  540.667949][T11481] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.676255][T11481] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  540.698168][T11481] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.706483][T11481] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:01 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb401}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:01 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40000100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  540.721920][T11494] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.733768][T11495] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.747868][T11497] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:01 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:01 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  540.787006][T11502] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.820266][T11503] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  540.847290][T11499] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.855664][T11499] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  540.867820][T11499] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.876207][T11499] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  540.946173][T11499] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.954881][T11499] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  540.966933][T11499] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  540.975298][T11499] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  540.989836][T11508] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  541.011852][T11510] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  541.023668][T11512] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:01 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:01 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  541.044544][T11513] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  541.081821][T11505] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.090533][T11505] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  541.106587][T11505] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.115405][T11505] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  541.174194][T11505] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.182679][T11505] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  541.210110][T11505] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.218586][T11505] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  541.234262][T11514] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  541.254681][T11520] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:01 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:01 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5e9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:01 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  541.292913][T11516] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.301282][T11516] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  541.314736][T11516] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.323075][T11516] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  541.381754][T11516] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.390169][T11516] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  541.400348][T11534] loop4: detected capacity change from 0 to 264192
[  541.402384][T11516] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.417221][T11516] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:01 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  541.441564][T11525] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  541.475654][T11532] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:01 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  541.503797][T11531] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  541.538203][T11544] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:01 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:01 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:02 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  541.550159][T11545] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  541.562749][T11547] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  541.594828][T11553] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  541.625496][T11539] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.634942][T11539] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  541.647968][T11539] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.657006][T11539] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  541.716571][T11539] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.725088][T11539] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  541.737271][T11539] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.745711][T11539] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:02 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff07}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:02 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x300000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  541.774092][T11554] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  541.785638][T11556] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  541.806131][T11557] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:02 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  541.853232][T11549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.861701][T11549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  541.882741][T11549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.891344][T11549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  541.954621][T11549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.963524][T11549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  541.989071][T11549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  541.997479][T11549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  542.014287][T11560] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.026790][T11561] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:02 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  542.044992][T11566] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:02 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  542.079973][T11568] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.136440][T11565] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.145296][T11565] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  542.159886][T11565] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.168921][T11565] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:02 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5eb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:02 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffef}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  542.234723][T11565] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.244653][T11565] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  542.265543][T11565] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:02 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  542.275799][T11565] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  542.300435][T11569] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.313169][T11573] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.350145][T11580] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.359198][T11587] loop4: detected capacity change from 0 to 264192
[  542.363662][T11590] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:02 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  542.393738][T11583] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:02 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  542.434890][T11565] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.443414][T11565] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  542.456704][T11565] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.465046][T11565] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  542.523086][T11565] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.531714][T11565] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  542.548759][T11565] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.557492][T11565] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:03 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:03 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  542.573959][T11586] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.597201][T11595] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.633536][T11598] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.645403][T11601] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:03 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x403000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:03 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  542.675340][T11608] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.690823][T11611] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:03 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1007fb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  542.734626][T11599] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.744531][T11599] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  542.757190][T11599] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.765685][T11599] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  542.835652][T11599] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.844035][T11599] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  542.865688][T11599] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:03 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  542.874869][T11599] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  542.893841][T11614] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.908101][T11617] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.920920][T11618] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  542.959403][T11599] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.968346][T11599] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  542.980938][T11599] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  542.989729][T11599] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  543.045548][T11599] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.054444][T11599] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  543.067412][T11599] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.076190][T11599] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:03 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  543.093225][T11619] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  543.117269][T11620] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  543.138907][T11621] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:03 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5ec)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:03 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:03 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b3ae8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:03 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x500000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:03 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  543.202059][T11625] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.211826][T11625] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  543.224824][T11625] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.233478][T11625] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  543.307993][T11625] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.316525][T11625] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  543.329140][T11625] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.330333][T11648] loop4: detected capacity change from 0 to 264192
[  543.338469][T11625] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  543.368926][T11645] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  543.413096][T11644] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  543.429897][T11647] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:03 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:03 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x11000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  543.463298][T11653] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  543.513273][T11643] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.522821][T11643] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  543.536087][T11643] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.545245][T11643] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  543.616259][T11643] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.625696][T11643] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  543.642845][T11643] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.652343][T11643] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:04 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  543.668642][T11656] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  543.682001][T11657] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:04 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x600000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  543.723838][T11663] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:04 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  543.777751][T11659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.786331][T11659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  543.800005][T11659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.808811][T11659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  543.880713][T11659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.889520][T11659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  543.915596][T11659] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  543.924831][T11659] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  543.941560][T11667] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  543.953898][T11665] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:04 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x12000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  543.979206][T11668] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.011074][T11674] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:04 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  544.030094][T11675] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.064236][T11677] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.094147][T11672] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.103276][T11672] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  544.117121][T11672] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.125924][T11672] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:04 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5ee)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:04 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:04 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x700000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  544.195244][T11672] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.204399][T11672] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  544.222227][T11672] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.231777][T11672] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:04 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  544.253586][T11692] loop4: detected capacity change from 0 to 264192
[  544.258847][T11682] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.276505][T11688] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.288997][T11689] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:04 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  544.306414][T11696] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.329545][T11672] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.337963][T11672] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  544.350548][T11672] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.359042][T11672] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  544.428030][T11672] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.436369][T11672] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  544.448960][T11672] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.457628][T11672] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:04 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  544.473039][T11699] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.493568][T11700] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:04 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:05 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  544.531964][T11703] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.568674][T11704] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:05 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x25000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:05 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  544.608595][T11713] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.637284][T11706] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.646360][T11706] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  544.658958][T11706] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.667764][T11706] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  544.736742][T11706] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.746243][T11706] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  544.760701][T11706] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.770612][T11706] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:05 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  544.785714][T11715] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.800886][T11718] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.812576][T11720] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:05 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  544.839759][T11721] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.854694][T11723] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.894596][T11725] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  544.950091][T11726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.959424][T11726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  544.971983][T11726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  544.981193][T11726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  545.037413][T11726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.046088][T11726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  545.058080][T11726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.066787][T11726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:05 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x27000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:05 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x900000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:05 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:05 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5ef)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:05 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  545.129300][T11726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.137838][T11726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  545.149707][T11726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.158094][T11726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  545.230908][T11726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.239506][T11726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  545.245707][T11740] loop4: detected capacity change from 0 to 264192
[  545.251499][T11726] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.266217][T11726] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:05 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  545.289918][T11746] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  545.313376][T11744] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  545.325220][T11750] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:05 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  545.337175][T11756] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  545.360420][T11745] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.369511][T11745] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  545.381655][T11745] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.390304][T11745] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  545.453089][T11745] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.461498][T11745] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  545.473025][T11745] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.481550][T11745] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:05 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:05 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  545.506614][T11761] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  545.518277][T11760] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  545.538597][T11763] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:06 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3c010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  545.595581][T11755] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.604006][T11755] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  545.617087][T11755] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.625426][T11755] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  545.699167][T11755] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.707588][T11755] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  545.732945][T11755] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:06 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  545.742564][T11755] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  545.758950][T11767] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  545.770698][T11765] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:06 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:06 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  545.810607][T11772] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  545.831730][T11773] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  545.887244][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.896985][T11768] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  545.909700][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.918193][T11768] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  545.978954][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  545.987748][T11768] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  546.013017][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:06 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5f1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:06 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  546.021510][T11768] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  546.036742][T11775] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.050288][T11776] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:06 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  546.076515][T11782] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.101623][T11785] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.112712][T11792] loop4: detected capacity change from 0 to 264192
[  546.119406][T11787] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.155921][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.164351][T11768] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  546.176306][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.184723][T11768] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  546.245117][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.253630][T11768] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  546.266048][T11768] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.274431][T11768] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:06 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:06 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  546.289504][T11789] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.310971][T11798] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:06 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:06 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x48000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  546.359231][T11799] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:06 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:06 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  546.404161][T11809] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.427085][T11811] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.505780][T11802] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.514432][T11802] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  546.527915][T11802] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.536209][T11802] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  546.595941][T11802] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.604344][T11802] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  546.617170][T11802] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.625708][T11802] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:07 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  546.641342][T11814] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.653562][T11820] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.665948][T11819] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:07 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7402, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:07 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  546.708319][T11822] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.733455][T11823] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.764815][T11817] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.773330][T11817] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  546.786262][T11817] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.794705][T11817] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  546.859869][T11817] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.868269][T11817] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  546.886080][T11817] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  546.894411][T11817] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  546.910395][T11828] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.933557][T11831] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  546.946347][T11832] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:07 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:07 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:07 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:07 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5f2)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:07 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  546.971244][T11833] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.009009][T11825] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.017930][T11825] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  547.029948][T11825] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.038796][T11825] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  547.108717][T11825] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.117115][T11825] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  547.121640][T11850] loop4: detected capacity change from 0 to 264192
[  547.129587][T11825] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.143584][T11825] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:07 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  547.167761][T11847] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.191396][T11849] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.217274][T11852] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.252649][T11859] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:07 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x60000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:07 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:07 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7080000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  547.269673][T11862] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.293437][T11863] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.338158][T11856] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.346657][T11856] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  547.358760][T11856] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.368014][T11856] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  547.424192][T11856] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.432560][T11856] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  547.444810][T11856] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.453583][T11856] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:07 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  547.470398][T11865] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.495109][T11869] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.508522][T11868] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:07 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a01, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  547.528422][T11874] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.558036][T11875] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:08 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x68000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:08 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1100000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:08 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  547.588247][T11876] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.639272][T11870] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.648121][T11870] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  547.660149][T11870] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.668505][T11870] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  547.726684][T11870] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.735185][T11870] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  547.748224][T11870] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.756973][T11870] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:08 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  547.783466][T11882] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.794774][T11886] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.808280][T11885] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  547.845111][T11878] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.853641][T11878] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  547.866445][T11878] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.874813][T11878] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:08 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5f4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  547.949614][T11878] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  547.957942][T11878] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  547.980905][T11878] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:08 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:08 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:08 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  547.989736][T11878] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  548.012068][T11887] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.023784][T11888] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.037565][T11890] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.075172][T11904] loop4: detected capacity change from 0 to 264192
[  548.092794][T11903] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:08 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  548.120822][T11906] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.147634][T11892] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.156059][T11892] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  548.169649][T11892] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.178554][T11892] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  548.241964][T11892] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.250570][T11892] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  548.263310][T11892] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.272119][T11892] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:08 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  548.287735][T11912] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.299127][T11916] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.325139][T11918] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:08 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  548.347391][T11921] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.387239][T11914] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:08 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:08 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x74000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  548.395552][T11914] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  548.423315][T11914] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.431721][T11914] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  548.494977][T11914] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.503735][T11914] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  548.521653][T11914] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.530137][T11914] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  548.545399][T11925] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.568144][T11931] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.580720][T11932] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:09 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  548.596021][T11935] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.620133][T11914] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.628427][T11914] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  548.640441][T11914] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.648868][T11914] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  548.715376][T11914] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.723748][T11914] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  548.740821][T11914] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.749303][T11914] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:09 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  548.764233][T11936] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.784764][T11937] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:09 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  548.818895][T11940] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.866194][T11950] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  548.896722][T11944] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:09 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2500000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:09 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:09 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5f5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:09 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  548.905458][T11944] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  548.921132][T11944] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  548.929647][T11944] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  549.007417][T11944] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.016087][T11944] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  549.032379][T11944] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.041374][T11944] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:09 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  549.060646][T11958] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.072728][T11963] loop4: detected capacity change from 0 to 264192
[  549.084054][T11957] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:09 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7402, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:09 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2700000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  549.106864][T11960] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.129301][T11969] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.191039][T11965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.199438][T11965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  549.211976][T11965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.220400][T11965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  549.277119][T11965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.285534][T11965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  549.297491][T11965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.306665][T11965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  549.321080][T11972] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.332450][T11976] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:09 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8cffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:09 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  549.368943][T11980] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.406898][T11975] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:09 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  549.415481][T11975] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  549.430632][T11975] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.439027][T11975] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  549.497938][T11975] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.506256][T11975] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  549.528158][T11975] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.537180][T11975] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  549.552939][T11982] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.565163][T11985] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.577226][T11986] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:10 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3c01000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:10 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:10 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8d080000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:10 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  549.608803][T11991] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.626633][T11992] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.683264][T11988] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.691746][T11988] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  549.704007][T11988] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.712693][T11988] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  549.776254][T11988] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.784782][T11988] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  549.799453][T11988] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.807856][T11988] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  549.823338][T11994] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.837490][T11997] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.849646][T11998] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.880117][T12005] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.900179][T12003] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:10 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5f7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:10 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:10 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xba010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:10 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4800000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:10 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  549.934511][T12004] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  549.966188][T12000] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.974828][T12000] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  549.986534][T12000] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  549.995157][T12000] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  550.049127][T12000] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.057848][T12000] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  550.070758][T12000] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.079693][T12000] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  550.099792][T12015] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.105001][T12023] loop4: detected capacity change from 0 to 264192
[  550.111597][T12017] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:10 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc0020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  550.140801][T12016] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.154154][T12025] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.165991][T12027] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:10 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  550.206371][T12000] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.214892][T12000] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  550.234292][T12000] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.242640][T12000] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  550.300455][T12000] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.308883][T12000] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  550.320500][T12000] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.329105][T12000] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:10 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a01, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:10 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  550.344175][T12028] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:10 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  550.382333][T12032] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.404915][T12034] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.429464][T12040] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.459048][T12043] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.470240][T12045] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:10 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe83a1b00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:10 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  550.484753][T12047] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.525611][T12041] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.533923][T12041] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  550.546148][T12041] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.554461][T12041] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  550.627813][T12041] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.636332][T12041] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  550.651897][T12041] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.660288][T12041] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  550.677826][T12050] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.699650][T12052] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.733070][T12055] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.757327][T12056] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.795393][T12046] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.804139][T12046] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  550.816698][T12046] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.825599][T12046] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:11 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5f8)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:11 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:11 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:11 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:11 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:11 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  550.888195][T12046] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.896660][T12046] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  550.909146][T12046] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  550.917577][T12046] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  550.956885][T12067] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  550.978950][T12075] loop4: detected capacity change from 0 to 264192
[  550.996812][T12065] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.010368][T12071] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.026185][T12077] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:11 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6800000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  551.055207][T12061] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.063659][T12061] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  551.076535][T12061] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.085252][T12061] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  551.146423][T12061] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.155499][T12061] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  551.169158][T12061] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.178094][T12061] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:11 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  551.196691][T12083] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.218593][T12081] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:11 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf6ffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:11 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  551.255754][T12086] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:11 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:11 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  551.335174][T12093] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.361867][T12094] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.407447][T12089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.416146][T12089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  551.428629][T12089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.437200][T12089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  551.496533][T12089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.504883][T12089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  551.517338][T12089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.525742][T12089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  551.540414][T12097] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.563079][T12101] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.575010][T12103] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.596210][T12104] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.626944][T12089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.636055][T12089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  551.658909][T12089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.667618][T12089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  551.724972][T12089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.734360][T12089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  551.746613][T12089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.754894][T12089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  551.769653][T12105] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:12 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:12 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfeffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:12 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:12 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7400000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:12 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5fa)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:12 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  551.865063][T12116] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.877515][T12118] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.890181][T12120] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.906088][T12129] loop4: detected capacity change from 0 to 264192
06:11:12 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:12 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  551.913791][T12125] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.925893][T12128] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  551.966946][T12121] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.975775][T12121] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  551.987787][T12121] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  551.996784][T12121] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  552.056604][T12121] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.065404][T12121] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  552.080040][T12121] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.088734][T12121] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:12 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  552.103537][T12131] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  552.119442][T12136] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:12 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffe000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  552.154186][T12139] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  552.185118][T12143] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:12 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:12 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33140000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  552.212932][T12146] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:12 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8cffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  552.276541][T12147] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  552.293503][T12153] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  552.323103][T12150] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.331442][T12150] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  552.344863][T12150] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.353161][T12150] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  552.415724][T12150] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.424772][T12150] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  552.437329][T12150] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.445996][T12150] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:12 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  552.464155][T12157] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  552.482340][T12156] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:12 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34140000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:12 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  552.506427][T12158] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  552.568131][T12163] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  552.588189][T12166] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  552.624188][T12161] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.632524][T12161] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  552.644959][T12161] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.653348][T12161] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:13 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5fb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:13 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffff7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:13 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xba01000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  552.707373][T12161] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.715793][T12161] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  552.727972][T12161] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.736434][T12161] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:13 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  552.772055][T12170] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  552.785648][T12175] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  552.798117][T12176] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:13 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:13 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffff8c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  552.819623][T12180] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  552.835702][T12181] loop4: detected capacity change from 0 to 264192
[  552.868951][T12168] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.877900][T12168] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  552.906545][T12168] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.915346][T12168] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  552.982894][T12168] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  552.991379][T12168] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  553.006191][T12168] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.014564][T12168] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:13 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc002000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  553.040249][T12185] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.052065][T12189] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.063580][T12195] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.093029][T12168] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.101373][T12168] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  553.113753][T12168] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.122042][T12168] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  553.179506][T12168] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.188655][T12168] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  553.201398][T12168] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.210269][T12168] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:13 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:13 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  553.229104][T12197] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.256794][T12199] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:13 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:13 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  553.295090][T12200] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:13 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe83a1b0000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  553.335279][T12209] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.377970][T12204] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.386830][T12204] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  553.399219][T12204] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.408593][T12204] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  553.466481][T12204] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.475208][T12204] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  553.486733][T12204] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.495249][T12204] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  553.513793][T12213] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.534758][T12214] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.546425][T12216] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.569628][T12217] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.587866][T12220] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.608967][T12221] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:14 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:14 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:14 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:14 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf400000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:14 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5fd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  553.640869][T12205] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.649300][T12205] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  553.662094][T12205] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.670482][T12205] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:14 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  553.734144][T12205] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.742677][T12205] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  553.757205][T12205] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.765942][T12205] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  553.791933][T12236] loop4: detected capacity change from 0 to 264192
[  553.817161][T12231] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:14 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf6ffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  553.836920][T12232] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.849159][T12229] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.865898][T12244] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  553.924067][T12239] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.932686][T12239] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  553.944973][T12239] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  553.953278][T12239] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  554.013947][T12239] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.022433][T12239] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  554.038477][T12239] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.046872][T12239] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  554.062137][T12248] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.076785][T12246] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:14 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:14 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  554.103924][T12250] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:14 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x200000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:14 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  554.139876][T12256] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:14 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfeffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  554.184729][T12259] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.211274][T12257] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.238294][T12251] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.246604][T12251] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  554.260314][T12251] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.269128][T12251] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  554.326676][T12251] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.335599][T12251] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  554.347392][T12251] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.355819][T12251] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:14 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:14 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  554.380588][T12264] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.392070][T12265] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.417237][T12260] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.425619][T12260] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  554.437353][T12260] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.445728][T12260] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  554.504453][T12260] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.512938][T12260] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  554.527714][T12260] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.535997][T12260] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:14 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  554.551975][T12267] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.575954][T12270] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.597018][T12271] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.616757][T12272] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:15 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c5fe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:15 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffff7f00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:15 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:15 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:15 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000001000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  554.650134][T12278] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.668989][T12277] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.707526][T12275] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.716176][T12275] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  554.728005][T12275] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.736412][T12275] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  554.799143][T12275] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.805724][T12295] loop4: detected capacity change from 0 to 264192
[  554.807627][T12275] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  554.836532][T12275] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.844879][T12275] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  554.873938][T12286] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:15 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:15 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  554.897961][T12292] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.909278][T12299] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.927187][T12301] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  554.963592][T12283] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.972060][T12283] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  554.983716][T12283] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  554.992117][T12283] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  555.051986][T12283] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.060359][T12283] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  555.082232][T12283] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.090816][T12283] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:15 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:15 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  555.104968][T12302] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.117166][T12303] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.164305][T12309] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.195749][T12306] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:15 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  555.204200][T12306] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  555.216224][T12306] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.224772][T12306] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  555.295572][T12306] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.304009][T12306] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  555.322056][T12306] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.330375][T12306] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  555.346210][T12312] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.358178][T12313] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.369884][T12314] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:15 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:15 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  555.400156][T12320] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.421600][T12321] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.463704][T12316] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.472103][T12316] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  555.492855][T12316] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.501282][T12316] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  555.556415][T12316] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.565038][T12316] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  555.577364][T12316] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.585623][T12316] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:16 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c600)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:16 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:16 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  555.610158][T12327] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.638380][T12316] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.646709][T12316] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  555.658339][T12316] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.666730][T12316] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  555.730896][T12316] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.738978][T12339] loop4: detected capacity change from 0 to 264192
[  555.739260][T12316] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  555.758574][T12316] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.766840][T12316] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:16 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  555.793825][T12328] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.821859][T12340] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:16 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:16 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  555.852896][T12338] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.884173][T12347] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:16 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:16 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  555.917514][T12353] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.937794][T12355] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  555.972895][T12346] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  555.981213][T12346] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  555.992895][T12346] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.001291][T12346] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  556.066084][T12346] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.074633][T12346] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  556.086217][T12346] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.094498][T12346] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:16 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  556.109755][T12356] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.123603][T12359] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:16 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:16 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:16 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  556.155723][T12361] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.180329][T12365] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.237045][T12367] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.253520][T12369] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.278307][T12362] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.286791][T12362] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  556.298899][T12362] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.307200][T12362] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  556.358650][T12362] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.366941][T12362] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  556.378842][T12362] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.387294][T12362] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  556.410822][T12375] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.422039][T12376] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.453406][T12362] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.461734][T12362] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  556.479247][T12362] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.487593][T12362] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  556.544678][T12362] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.553085][T12362] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  556.565678][T12362] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.574097][T12362] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:17 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:17 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:17 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x7ffff000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:17 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:17 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  556.596329][T12377] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:17 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  556.650604][T12389] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.676170][T12391] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.680352][T12388] loop4: detected capacity change from 0 to 264192
06:11:17 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:17 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  556.687628][T12393] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.705381][T12396] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.722105][T12401] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.765122][T12394] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.773482][T12394] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  556.786769][T12394] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.795350][T12394] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  556.856720][T12394] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.865167][T12394] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  556.884897][T12394] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  556.893433][T12394] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:17 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  556.909038][T12402] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.923025][T12408] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:17 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  556.956279][T12407] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  556.983488][T12412] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:17 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:17 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000010000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:17 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  557.007605][T12415] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.061496][T12416] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.078310][T12421] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.106841][T12409] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.115156][T12409] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  557.127883][T12409] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.136256][T12409] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  557.191806][T12409] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.200136][T12409] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  557.212564][T12409] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.220862][T12409] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:17 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  557.236138][T12425] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.250689][T12426] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.271880][T12428] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.303549][T12430] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.387959][T12431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.396426][T12431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  557.408766][T12431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.417064][T12431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:17 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0xffffffffffffffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:17 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe83a1b00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:17 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40000100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:17 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:17 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  557.468715][T12431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.477117][T12431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  557.490614][T12431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.499484][T12431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  557.546251][T12431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.554544][T12431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  557.566097][T12431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.574524][T12431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:18 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10004c, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x100)
openat(r4, &(0x7f0000000200)='./file1\x00', 0x400700, 0x2)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r5 = signalfd4(r1, &(0x7f0000000040)={[0x1]}, 0x8, 0x800)
setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x1)
dup2(r3, r5)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:18 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  557.624154][T12431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.632426][T12453] loop4: detected capacity change from 0 to 264192
[  557.632626][T12431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  557.651808][T12431] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.660644][T12431] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  557.696004][T12446] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.709062][T12449] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.720919][T12448] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:18 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:18 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  557.740277][T12460] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.749525][T12466] loop4: detected capacity change from 0 to 264192
[  557.751440][T12465] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.793157][T12458] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.801814][T12458] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  557.813892][T12458] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.822291][T12458] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  557.886617][T12458] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.895009][T12458] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  557.906935][T12458] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  557.915307][T12458] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:18 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe0ffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:18 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  557.929602][T12467] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.944126][T12477] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  557.963783][T12479] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:18 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  557.984244][T12480] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.008163][T12487] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:18 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:18 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  558.040989][T12486] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.080859][T12488] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.089504][T12488] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  558.102285][T12488] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.110562][T12488] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  558.161178][T12488] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.169498][T12488] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  558.181314][T12488] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.190045][T12488] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:18 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  558.204099][T12497] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.215734][T12494] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.229367][T12498] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:18 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  558.263458][T12499] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.285214][T12500] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:18 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb071000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  558.309340][T12507] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.341855][T12503] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.350575][T12503] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  558.362591][T12503] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.370861][T12503] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  558.420040][T12503] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.428830][T12503] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  558.441039][T12503] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.450283][T12503] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  558.464690][T12510] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.476687][T12512] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.508247][T12503] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.518057][T12503] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  558.530294][T12503] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.539148][T12503] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  558.574238][T12475] loop4: detected capacity change from 0 to 264192
[  558.595808][T12503] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.604236][T12503] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  558.616199][T12503] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:19 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:19 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:19 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:19 executing program 4:
r0 = getuid()
setuid(r0)
ioprio_set$uid(0x0, r0, 0x4007)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r1, r2, 0x0, 0x1c500)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  558.624567][T12503] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:19 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  558.670035][T12513] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.680306][T12529] loop4: detected capacity change from 0 to 264192
06:11:19 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  558.720138][T12528] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.738558][T12531] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.763940][T12523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.772395][T12523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  558.784208][T12523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.792615][T12523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  558.847147][T12523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.856270][T12523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  558.868613][T12523] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.877339][T12523] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:19 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x300000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:19 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  558.904540][T12540] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.917596][T12542] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  558.931041][T12543] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:19 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  558.975465][T12536] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  558.983783][T12536] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  558.996541][T12536] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.005437][T12536] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  559.070037][T12536] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.079432][T12536] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  559.104040][T12536] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.112542][T12536] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  559.128185][T12544] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.140685][T12546] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:19 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:19 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:19 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x400000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  559.172206][T12553] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.188978][T12554] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.222098][T12549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.230493][T12549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  559.242180][T12549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.250500][T12549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  559.318044][T12549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.326511][T12549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  559.346043][T12549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.354478][T12549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:19 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  559.369471][T12556] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.381038][T12558] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.404544][T12563] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:19 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff070000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:19 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x403000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  559.427829][T12566] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.440987][T12568] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.461890][T12569] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:19 executing program 4:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
splice(r0, 0x0, r1, 0x0, 0x10000, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="04000509840000006600100004f8010000dc1400000000", 0x17}], 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX])
chdir(&(0x7f0000000000)='./file1\x00')
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r3=>0x0, <r4=>0x0})
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{r3, r4/1000+60000}, {0x0, 0x2710}})
writev(r1, &(0x7f0000000580)=[{&(0x7f0000000300)="37ac49279557f4730dce", 0xa}, {&(0x7f0000000500)="ad0ca902f8fd5204c391c99362ec95ef000a031e43145dfed4590623e6527ea3f4401bbc57fe9867c7aa8beba3615745c499a6a875cf1d9c52cfb3c2dd65f413133a679652d6fbf8b8cb3ef2b495e5d426c5e8d8693be2318c3aec2323f16c7ebe66d8e0d735cebcc0b9a986857af9f97e1b031e6f", 0x75}, {&(0x7f0000000340)="6c0ff20d5296521fdcee153ab9d325417b3458ec924a6bb0352ce8e85ec8d4fd7cef836ea93bae286fe68e2c39df3fe5b659caae56ac4ec70b42", 0x3a}], 0x3)
write$9p(0xffffffffffffffff, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(0xffffffffffffffff, r2, 0x0, 0x1c500)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
openat(r1, &(0x7f0000000200)='./file1\x00', 0x202002, 0x41)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f00000005c0)={'nr0\x00', {0x2, 0x0, @initdev}})
preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000400)=""/223, 0xdf}, {&(0x7f0000000240)=""/55, 0x37}], 0x2, 0xd9f, 0x0)

[  559.496648][T12549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.504968][T12549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  559.517842][T12549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.526094][T12549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  559.596024][T12549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.604335][T12549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  559.620530][T12549] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.628821][T12549] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:20 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:20 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  559.649761][T12573] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.666604][T12572] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.685129][T12584] loop4: detected capacity change from 0 to 264192
06:11:20 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  559.689895][T12581] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.698426][T12584] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff" or missing value
[  559.710002][T12591] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:20 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000300)='./file1\x00', 0x1c9800, 0x1)
truncate(&(0x7f0000000040)='./file1\x00', 0x2)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x3, 0x1, 0x0, 0x6, 0xfc, "b7a726e7a916a42e59da6ca71455cd0f6d4212a4834794a4b2c162d5ba488d69c5caf8d325595056aa8e414f14529416633f892097727d13f7c7c069ebffedf17720100c35088358b91f85058db338c38265e7301a118fa7af8e7e95a0b20db0e6a60d412be38f942339c2cb944cb07988895e91566f5c6060541904a2babd6213712eb8895b05174a66258c79d70460bbf749a5e62c0d57eab808dd45aae6bda60a75450ab525f86ea539ed107cf26cdefea04700d80110a71fbc14ce983be4debb5cdb0ba125ac5e2ea6dcbc605e85b3df68bcf5bd111364514449dae71d53abcbe893225645d13ff02ca47a805b09b13087f607d605d582a544d5"}, 0x105, 0x3)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:20 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:20 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x500000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  559.746570][T12594] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.758238][T12595] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.771796][T12601] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:20 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  559.803684][T12607] loop4: detected capacity change from 0 to 264192
[  559.822260][T12585] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.830584][T12585] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  559.844942][T12585] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.853276][T12585] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  559.923750][T12585] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.932094][T12585] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  559.948896][T12585] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  559.957237][T12585] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:20 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  559.974658][T12611] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  559.987196][T12615] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  560.008771][T12616] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  560.030765][T12619] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  560.051648][T12623] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:20 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:20 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:20 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x600000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  560.073886][T12624] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:20 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  560.116787][T12620] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.125489][T12620] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  560.148067][T12620] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.156952][T12620] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  560.220373][T12620] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.228751][T12620] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  560.241332][T12620] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.249926][T12620] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:20 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  560.264641][T12628] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  560.299249][T12634] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:20 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  560.311022][T12635] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  560.331301][T12636] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  560.363353][T12629] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.371772][T12629] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  560.384557][T12629] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.393223][T12629] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  560.461044][T12629] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.469366][T12629] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  560.483910][T12629] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.492309][T12629] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  560.508037][T12640] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  560.519478][T12641] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:20 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  560.554731][T12644] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  560.586537][T12638] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:21 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x700000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:21 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:21 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
r2 = getuid()
setuid(r2)
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x225, 0x4, &(0x7f00000004c0)=[{&(0x7f00000001c0)="9fc461e7ea84c9fac301679835212901d7fbf93207907208bcfdea860c3f174312c74aa35100d179e0964a490ced9089b401d3d8286a1188f51d0a6eb8d993fadf3dc1c473a5f4078259cb0ca02412eb34be2f536c8fff3e81de123fcfe6935bfd7c8e105b18d56f0ff2f49be5f684bc537dd71aa505bd570a148f295a3e3f90fa77ef932e1b26cc25ec01fd370528", 0x8f, 0x2}, {&(0x7f0000000300)="03a53e71d3ce07fb510884d17ad048cea861227d1eb74cd2ce9d94d46af00eb7029810ae54909f27f4972a3d1b971b266d751e9de6b81ce9b7c37593aada22b05a755ab38f5af36a931232f41880a9f3022bec28", 0x54, 0x3f}, {&(0x7f0000000400)="1bd2c4e4a74277260dc00d211753c0b1d23aff67ae33a87fcfabf98bb92f111b66640e4dbf74140f97bb852a54b351dbf13e5c7a9bc0b917eba018affc668686acc0020a938b0e0bdd83575b0f965a9980650b66d9d364b31f835eb8a6ef431e157618aa4fcea79675a3b14dc92e9a7dad38527a24d3b9c6d3710971388a0f5c2a0ea111b74f87a43c7f3ecedd99", 0x8e, 0x3}, {&(0x7f0000000140)="a97f84d6c7727b96c2391a3fcf9c7a83d87fe5", 0x13, 0x7}], 0x200024, &(0x7f0000000540)={[{}, {@dots}, {@dots}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, r2}}]})
sendfile(r0, r1, 0x0, 0x1c500)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r5)
splice(r4, 0x0, r5, 0x0, 0x10000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x80010, r5, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  560.595136][T12638] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  560.607547][T12638] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.616079][T12638] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  560.691978][T12638] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.700362][T12638] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  560.701050][T12658] loop4: detected capacity change from 0 to 264192
[  560.712774][T12638] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.727498][T12638] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:21 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  560.748571][T12647] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  560.762498][T12646] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  560.774275][T12654] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:21 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:21 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  560.828769][T12664] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  560.850090][T12665] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:21 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  560.894296][T12652] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.903012][T12652] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  560.916353][T12652] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  560.925714][T12652] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  560.993954][T12652] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.002768][T12652] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  561.020331][T12652] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.028783][T12652] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  561.043856][T12667] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.064942][T12674] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.076350][T12675] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:21 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:21 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  561.090908][T12676] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.124380][T12670] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.133151][T12670] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  561.145329][T12670] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.153792][T12670] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  561.220654][T12670] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.229635][T12670] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  561.247236][T12670] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.255599][T12670] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:21 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x25}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:21 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x900000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  561.270620][T12678] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.282738][T12677] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.296899][T12683] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:21 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:21 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  561.332886][T12688] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.371570][T12689] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.403431][T12681] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.411762][T12681] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  561.423875][T12681] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.432276][T12681] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  561.496278][T12681] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.504805][T12681] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  561.518325][T12681] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.527197][T12681] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:21 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141141, 0x110)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  561.545217][T12694] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.557074][T12695] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:22 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:22 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:22 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  561.587651][T12698] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.605883][T12704] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.650137][T12692] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.658750][T12692] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  561.666299][T12718] loop4: detected capacity change from 0 to 264192
[  561.671669][T12692] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.685515][T12692] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  561.748527][T12692] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.756981][T12692] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  561.779881][T12692] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:22 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  561.788220][T12692] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  561.807676][T12707] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.819611][T12712] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:22 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:22 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  561.849298][T12727] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.864584][T12729] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  561.913063][T12709] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.921738][T12709] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  561.934869][T12709] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  561.943298][T12709] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  562.002104][T12709] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.011250][T12709] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  562.034308][T12709] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:22 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  562.042651][T12709] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  562.058816][T12731] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  562.070309][T12732] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  562.082553][T12737] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  562.134610][T12734] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.142959][T12734] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  562.155837][T12734] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.164365][T12734] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  562.219775][T12734] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.228138][T12734] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  562.240677][T12734] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.249533][T12734] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:22 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74020000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  562.268794][T12739] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  562.292353][T12741] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:22 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:22 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:22 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  562.326151][T12743] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  562.391802][T12749] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  562.420014][T12752] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  562.428887][T12752] ref_ctr increment failed for inode: 0x361d offset: 0x2 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:22 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:22 executing program 4:
r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = getuid()
setuid(r2)
quotactl(0xff, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000100)="937fac2164c054789936a87130ff03bde27af6ba31d8220d0705fc091da3d96718c5833a8f83537956b6a3a1ccff870ae49ce2a2118dbcf6223bee100d2902f137c3b85b44df25e632974589498904a3784616b53131a1f5ea4a9017a804dcddc4b6c7c5ff250614de247ae794a748c2aec683641f78bba39629f30cee0955dd30ddff9c27a27ebdd54fa92481f4892e2b71e3be485c9d0d5f15f524d3dfa786e3ac768a99f0ff72607a476e37d4bca1c0f7a2b1624a741efabc4a9fdd9637f1")
r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x501e80, 0x134)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r1, r3, 0x0, 0x1c500)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r0, &(0x7f00000001c0), 0x0, 0x2, 0x6144)

[  562.477457][T12747] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.487253][T12747] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  562.499632][T12747] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.508080][T12747] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  562.573382][T12747] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.581712][T12747] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  562.595690][T12747] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.605167][T12747] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  562.632424][T12758] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  562.637272][T12771] loop4: detected capacity change from 0 to 264192
[  562.657833][T12769] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:23 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17, 0x10000000}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:23 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:23 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x60}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  562.681042][T12776] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  562.719131][T12747] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.727857][T12747] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  562.738133][T12783] loop4: detected capacity change from 0 to 264192
[  562.740682][T12747] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.748215][T12783] FAT-fs (loop4): bogus number of reserved sectors
[  562.754461][T12747] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  562.761186][T12783] FAT-fs (loop4): Can't find a valid FAT filesystem
[  562.817801][T12747] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.826467][T12747] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  562.842733][T12747] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  562.851120][T12747] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:23 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:23 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  562.870716][T12781] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  562.879135][T12781] ref_ctr increment failed for inode: 0x361d offset: 0x3 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  562.925057][T12781] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  562.933272][T12781] ref_ctr decrement failed for inode: 0x361d offset: 0x3 ref_ctr_offset: 0x8 of mm: 0x0000000061f9b3e2
[  562.953010][T12781] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  562.961645][T12781] ref_ctr decrement failed for inode: 0x361d offset: 0x3 ref_ctr_offset: 0x8 of mm: 0x0000000061f9b3e2
[  562.974339][T12778] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  562.987779][T12790] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:23 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xd00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:23 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  563.020803][T12800] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  563.029217][T12800] ref_ctr increment failed for inode: 0x361d offset: 0x3 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  563.051221][T12801] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:23 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x68}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  563.079112][T12795] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.087688][T12795] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  563.102287][T12795] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.110960][T12795] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  563.161846][T12795] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.170223][T12795] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  563.181925][T12795] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.190290][T12795] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:23 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a010000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  563.204288][T12803] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  563.226541][T12805] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  563.234868][T12805] ref_ctr increment failed for inode: 0x361d offset: 0x4 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:23 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:23 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  563.270157][T12808] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  563.283101][T12809] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  563.325197][T12814] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  563.333455][T12814] ref_ctr increment failed for inode: 0x361d offset: 0x4 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  563.347575][T12815] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:23 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  563.377575][T12812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.385946][T12812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  563.398776][T12812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.407215][T12812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  563.459877][T12812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.468480][T12812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  563.481611][T12812] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.489996][T12812] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  563.505145][T12821] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  563.523602][T12824] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  563.531981][T12824] ref_ctr increment failed for inode: 0x361d offset: 0x5 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  563.549851][T12783] loop4: detected capacity change from 0 to 264192
[  563.558099][T12783] FAT-fs (loop4): Unrecognized mount option "8T" or missing value
[  563.573274][T12826] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:24 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="0400050900666100fa740ef801675909a712d3d44a643c29e1e381c7b59bba387564bfe898e54dba87715cca04ea062127d04793ef38e61be2674d5968705a842c97273132e2e64fbf50dd1648f711feab2680ff8cf12eed7dd56c18e7272be238495e561cc8a167c88b3cae0d7197514ed132a3f999398c9e4d20239ea5f3642a86412bb0200e4925ababf0562092282a404e5b11a14ba7d77fd5beec01f2274ec47989d628cba3c1360c2e6806ff31a1929196d559187fd1a63e4fb233be8347c692a7e9854a9f25b0d6053cdf9514271910690f7e05e92e1955c3aa50aa55dbf24f5ca6bf6ea370aa429570298b3d", 0xf0, 0x1000000}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r2 = fsmount(r0, 0x0, 0x8)
write$9p(r2, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:24 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:24 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74020000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:24 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:24 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:24 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  563.604133][T12831] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  563.613067][T12831] ref_ctr increment failed for inode: 0x361d offset: 0x5 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  563.665309][T12842] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  563.679528][T12845] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  563.695653][T12847] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  563.696601][T12843] loop4: detected capacity change from 0 to 264192
[  563.704046][T12847] ref_ctr increment failed for inode: 0x361d offset: 0x6 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  563.730874][T12843] FAT-fs (loop4): bogus number of reserved sectors
[  563.737482][T12843] FAT-fs (loop4): Can't find a valid FAT filesystem
[  563.760491][T12837] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.769596][T12837] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  563.781234][T12837] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.789945][T12837] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  563.816955][T12843] loop4: detected capacity change from 0 to 264192
[  563.825257][T12843] FAT-fs (loop4): Unrecognized mount option "8T" or missing value
[  563.844455][T12837] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.852737][T12837] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:24 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f0000000040)='./file0\x00', 0x5213c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r2, 0x23, 0xd8a4, 0x5})

[  563.864741][T12837] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  563.873211][T12837] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  563.901071][T12850] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:24 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:24 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1100000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:24 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:24 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  563.908367][T12866] loop4: detected capacity change from 0 to 264192
[  563.919070][T12851] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:24 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
mkdir(&(0x7f0000000040)='./file1\x00', 0x200)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
write$P9_RLINK(r2, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:24 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  564.001069][T12872] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  564.014477][T12879] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  564.042320][T12882] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  564.050521][T12882] ref_ctr increment failed for inode: 0x361d offset: 0x7 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  564.070069][T12884] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  564.076970][T12883] loop4: detected capacity change from 0 to 264192
06:11:24 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:24 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  564.083914][T12888] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  564.130876][T12876] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.139387][T12876] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  564.152575][T12876] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.160905][T12876] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:24 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  564.234245][T12876] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.242684][T12876] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  564.259133][T12876] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.267529][T12876] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:24 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  564.304201][T12898] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  564.320242][T12899] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:24 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xf4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:24 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  564.348806][T12904] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  564.360701][T12906] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  564.395992][T12880] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.404355][T12880] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  564.416525][T12880] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.425030][T12880] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  564.491569][T12880] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.500045][T12880] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  564.516478][T12880] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.524879][T12880] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:24 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a010000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  564.545591][T12908] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  564.553933][T12908] ref_ctr increment failed for inode: 0x361d offset: 0x8 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:25 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  564.585835][T12911] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  564.608547][T12912] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:25 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:25 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2500000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  564.653949][T12921] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  564.671769][T12923] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  564.713078][T12918] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.721511][T12918] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  564.733168][T12918] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.741441][T12918] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  564.800354][T12918] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.809030][T12918] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  564.820852][T12918] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  564.829132][T12918] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:25 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x13c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:25 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cffffff, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:25 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v1={0x2, "8f5d5f7e"}, 0x5, 0x2)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  564.850859][T12925] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  564.859236][T12925] ref_ctr increment failed for inode: 0x361d offset: 0x9 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:25 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  564.911538][T12928] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:25 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:25 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2700000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  564.959122][T12949] loop4: detected capacity change from 0 to 264192
[  564.964758][T12939] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  564.986524][T12941] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  565.029651][T12937] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.037967][T12937] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  565.050028][T12937] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.058304][T12937] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  565.127332][T12937] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.135650][T12937] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  565.153680][T12937] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.162085][T12937] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:25 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1ba}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  565.189115][T12953] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  565.206423][T12957] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  565.214891][T12957] ref_ctr increment failed for inode: 0x361d offset: 0xa ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:25 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6ffffff, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  565.251298][T12958] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  565.283865][T12946] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.292183][T12946] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  565.304277][T12946] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.312567][T12946] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  565.383166][T12946] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.391721][T12946] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  565.410625][T12946] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.418936][T12946] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:25 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:25 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x3c01000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  565.436166][T12963] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  565.456972][T12960] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:25 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  565.505735][T12969] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:25 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2c0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  565.547241][T12968] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  565.555483][T12968] ref_ctr increment failed for inode: 0x361d offset: 0xb ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  565.619910][T12965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.628582][T12965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  565.641125][T12965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.649420][T12965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  565.708373][T12965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.716897][T12965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  565.730063][T12965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.738479][T12965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:26 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  565.753996][T12971] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  565.780578][T12978] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:26 executing program 4:
r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r1, r2, 0x0, 0x1c500)
mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x24)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0)
r4 = fspick(r1, &(0x7f0000000100)='./file1\x00', 0x1)
ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000140))
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:26 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4800000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  565.805712][T12980] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  565.836053][T12965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.844556][T12965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  565.856245][T12965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.864555][T12965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  565.931111][T12965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  565.939433][T12965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  565.955080][T12993] loop4: detected capacity change from 0 to 264192
[  565.958575][T12965] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:26 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  565.970143][T12965] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  565.985553][T12985] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  566.011542][T12986] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:26 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  566.020801][T12986] ref_ctr increment failed for inode: 0x361d offset: 0xc ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:26 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  566.071097][T12995] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:26 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  566.156274][T13010] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  566.177126][T13011] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:26 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4c00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  566.208510][T13003] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  566.216899][T13003] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  566.229355][T13003] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  566.238134][T13003] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  566.303249][T13003] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  566.312593][T13003] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  566.325065][T13003] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  566.333743][T13003] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  566.365969][T13018] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  566.374292][T13018] ref_ctr increment failed for inode: 0x361d offset: 0xd ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  566.394944][T13019] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:26 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x304}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  566.406349][T13021] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:26 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  566.450108][T13015] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  566.458451][T13015] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  566.470797][T13015] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  566.479203][T13015] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  566.537388][T13015] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  566.545845][T13015] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  566.569902][T13015] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:27 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:27 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  566.578357][T13015] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  566.596289][T13024] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  566.622018][T13029] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:27 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  566.662408][T13034] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  566.680533][T13035] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  566.725974][T13036] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  566.734396][T13036] ref_ctr increment failed for inode: 0x361d offset: 0xe ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  566.765246][T13027] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:27 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x403}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:27 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000100)={0x0, 0x1})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  566.774070][T13027] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  566.786726][T13027] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  566.795639][T13027] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  566.881602][T13027] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  566.890298][T13027] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  566.896526][T13055] loop4: detected capacity change from 0 to 264192
[  566.902812][T13027] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  566.916525][T13027] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:27 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6800000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  566.944739][T13042] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:27 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:27 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  566.996658][T13054] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  567.051508][T13037] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.060036][T13037] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  567.072794][T13037] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.081196][T13037] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  567.147770][T13037] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.156150][T13037] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  567.177183][T13037] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.185693][T13037] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:27 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  567.200936][T13064] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  567.212752][T13061] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  567.233876][T13062] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  567.242339][T13062] ref_ctr increment failed for inode: 0x361d offset: 0xf ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:27 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  567.282917][T13068] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  567.307006][T13070] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  567.324546][T13071] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:27 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x6c00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:27 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  567.332778][T13071] ref_ctr increment failed for inode: 0x361d offset: 0xf ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  567.395169][T13066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.403491][T13066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  567.416454][T13066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.424826][T13066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  567.493085][T13066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.501424][T13066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  567.516286][T13066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.524792][T13066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  567.541052][T13072] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  567.570349][T13078] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:28 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:28 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8c, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  567.593158][T13080] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  567.601597][T13080] ref_ctr increment failed for inode: 0x361d offset: 0x10 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:28 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
syz_io_uring_setup(0x407e, &(0x7f0000000300)={0x0, 0xf4d6, 0x4, 0x1, 0x207, 0x0, r0}, &(0x7f000060b000/0x2000)=nil, &(0x7f00006ba000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000400)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x2, 0x1, &(0x7f0000000440)="c053c7d9d3c33737ce59cf4665b80bec9a8d6dce09d86ba45d82bf64d950d8fde94e48a812734d4f4635c1e57c88645d06e9c0d8082e8386d01f0b74b1356afbb52238b8d38370bce40f93811f71a4ba4901ae93619cba75f659453088df38871e542a560d3092e535193abcd40c9ad5cca9456b27c601", 0x7ff, 0x0, 0x1}, 0x9)
write$P9_RREADDIR(r0, &(0x7f0000000500)={0xe4, 0x29, 0x1, {0x8d2a, [{{0x20, 0x3, 0x1}, 0x1f, 0x1, 0x7, './file1'}, {{0x0, 0x1, 0x6}, 0x7, 0x80, 0x7, './file1'}, {{0xdaf34d1b236f44a3, 0x3}, 0x4, 0x20, 0x7, './file0'}, {{0x8, 0x3}, 0x2, 0x9, 0x7, './file1'}, {{0x80, 0x0, 0x2}, 0x1, 0x96, 0x7, './file1'}, {{0x2, 0x3, 0x2}, 0xffff, 0xff, 0x7, './file1'}, {{0x2, 0x3, 0x7}, 0x2229, 0x0, 0x7, './file0'}]}}, 0xe4)
sendfile(r0, r1, 0x0, 0x1c500)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
syz_io_uring_setup(0x1ede, &(0x7f0000000240), &(0x7f000075d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0)
r6 = syz_mount_image$tmpfs(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x6, 0x5, &(0x7f00000009c0)=[{&(0x7f0000000680)="234d149eef39c932be08bb65875b0e6be507de49da98c2985b2229fb9da0cbc32a2a37e2d5c239e98cba43d9fa88affc53fe0126e595fd", 0x37, 0x8}, {&(0x7f00000006c0)="bf8759c5b4b1bab151a694c178a6bdbe5e1df6074686bd90d3cce366f5cdab689a3cebcb048e912239d4bdee598a0ad4fbf484b5c3041563536126fd5adc67555ee8526199405915aa98baa467057b29d975990ff755c79c452e5532cec8e0f79a39dde00c4b22fc15bfd4136f8c7f5c457517849f4af1080227cad8f1b282df247bfaab1e684e7ba90aced144ca1d162a840a2599c746be28d7571d7d7ec0422fd07160ed79ef63d0626fb13dbc4c14860e8cdec79dcf89a31437cdd26da78a47e79cfc30a4956a5eacfd8606d4021b02d3505d09e9aa890e95db0474e22b89c44174cb2477c317d3b0f5", 0xeb, 0xfff}, {&(0x7f00000007c0)="621649cb32d10c3fe9b7e33e56", 0xd, 0x2}, {&(0x7f0000000800)="edd7378bdcfe401635bdf086cd333631cddccf7166594cc49687920567a009e7987bd197e9aa491540e1736631e0b0103239515ec707b64b6269f4bbb0ef3abb604560333effcc49628d37390919d90bb4fcc093e582d3f349584620d77df7abb7a5a2b54237a51886acbd2a271ecc81e0e0cb3d31a4469054e99140eddaf7f780497293f397ba77019f6d5d588af70de2553799bd8152420c7ce81f01a45bea31e68b3f1e6a704cf2992e1faf7817eee41cf9276d62caf4d33c677117c4b45bc50f37e17746ecc50233a12bfbd24fb7eae748b430d0af40f067879c1c63b47c", 0xe0, 0x3}, {&(0x7f0000000900)="2bdb1abb3d861e4c70644c35de99edce125e99db916b470014015210184ab989d3810e3af4104cb661884987ff5d641bde4d580b0424bc6d00648be58bd6eeb55b2f7c8e704e4238cc7ff49dfa92864a15d96a0caa4807a2e9fabef39437c18f6648b667f5e29684387d2ca5f0dca4eb8bd0bc53ecebc3ca2ab149be3839a24131113f5f8ca6950ecb779a", 0x8b, 0x6}], 0x4000, &(0x7f0000000a40)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36, 0x34, 0x33]}}, {@huge_never}, {@mode={'mode', 0x3d, 0x7}}], [{@subj_user={'subj_user', 0x3d, '\x06\xa0]!-'}}]})
preadv(r6, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)=""/161, 0xa1}, {&(0x7f0000000b80)=""/24, 0x18}, {&(0x7f0000000bc0)=""/254, 0xfe}, {&(0x7f0000000cc0)=""/134, 0x86}, {&(0x7f0000000d80)=""/58, 0x3a}], 0x5, 0x10000, 0x3f)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
syz_io_uring_setup(0x3622, &(0x7f0000000100)={0x0, 0x4450, 0x10, 0x0, 0x30d, 0x0, r3}, &(0x7f00006ee000/0x2000)=nil, &(0x7f000037b000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)=<r7=>0x0)
syz_io_uring_submit(r4, r7, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd_index=0xa, 0x6, 0x1ff, 0xf7175daf, 0x4, 0x1, {0x1}}, 0x2)
fspick(r1, &(0x7f0000000e40)='./file1\x00', 0x1)
preadv(r3, &(0x7f0000000280), 0x0, 0xd9f, 0x8401)

[  567.658429][T13074] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.666854][T13074] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  567.680300][T13074] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.688702][T13074] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  567.758222][T13074] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.766974][T13074] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  567.780012][T13074] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  567.781047][T13093] loop4: detected capacity change from 0 to 264192
[  567.788318][T13074] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:28 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x11}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:28 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7400000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:28 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c02}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  567.807390][T13082] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  567.824450][T13083] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  567.888433][T13099] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  567.896860][T13099] ref_ctr increment failed for inode: 0x361d offset: 0x11 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  567.937871][T13099] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  567.945912][T13099] ref_ctr decrement failed for inode: 0x361d offset: 0x11 ref_ctr_offset: 0x8 of mm: 0x000000006f8b7fe4
[  567.963068][T13099] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  567.971153][T13099] ref_ctr decrement failed for inode: 0x361d offset: 0x11 ref_ctr_offset: 0x8 of mm: 0x000000006f8b7fe4
06:11:28 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:28 executing program 4:
r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0xd3)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r1, r2, 0x0, 0x1c500)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r4=>0x0})
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000600)={0x0, 0xfb, 0xb2, 0x0, 0x9, "9e90bada84cb3ca34fa7978e0a2077bc", "6530df21712bf384fec6635d6c74f946bb3c5a91ad17e7b844faa1593753560e79f5610ef97d14f8fb2aaee0b3004e00f423dac14e7027b0ae5a374a8b56304efa51750ed091f357ae1a8ec5c04c54c2df8da62140a368542a6c2a22cf646539cbfa6bd665dad591875c8f67e39696b3601a972871b646045c49063de85da0fd563a005d83a07085393ad279a24b3de6d091268df82d539459e1cdd134"}, 0xb2, 0x3)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000100)={"4e88b7cf5675bbfb4d7aa9b775811cd2", r4, 0x0, {0x10001, 0x3}, {0x4, 0x6}, 0x4, [0x100000001, 0x100000000, 0xf0, 0xf156, 0x3, 0x2, 0x58, 0x879f, 0x5, 0x2, 0x5, 0x8c, 0xd, 0x5, 0x1, 0x4]})
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  567.983864][T13100] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  568.006129][T13089] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  568.014535][T13089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x000000006f8b7fe4
[  568.038312][T13089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  568.046633][T13089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  568.059289][T13089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  568.067647][T13089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  568.132839][T13089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  568.141150][T13089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  568.157512][T13089] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  568.166228][T13089] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  568.178241][T13120] loop4: detected capacity change from 0 to 264192
[  568.185719][T13102] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  568.203421][T13108] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  568.212177][T13108] ref_ctr increment failed for inode: 0x361d offset: 0x6c02 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:28 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x12}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:28 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  568.251980][T13119] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  568.284045][T13124] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:28 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x7a00000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  568.317943][T13126] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  568.326251][T13126] ref_ctr increment failed for inode: 0x361d offset: 0x6c02 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  568.355820][T13128] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:28 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c03}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:28 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:28 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x25}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  568.428673][T13134] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  568.473948][T13132] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  568.482332][T13132] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  568.494059][T13132] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  568.502389][T13132] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  568.562142][T13132] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  568.570544][T13132] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  568.582347][T13132] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  568.590631][T13132] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  568.610214][T13141] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  568.618412][T13141] ref_ctr increment failed for inode: 0x361d offset: 0x6c03 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  568.644172][T13142] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:29 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8cffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  568.655336][T13143] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  568.668434][T13145] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  568.676870][T13145] ref_ctr increment failed for inode: 0x361d offset: 0x25 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:29 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:29 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xa00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:29 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c04}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  568.708378][T13147] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  568.751924][T13150] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:29 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x27}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  568.760517][T13150] ref_ctr increment failed for inode: 0x361d offset: 0x25 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  568.781931][T13149] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  568.826892][T13159] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  568.835270][T13159] ref_ctr increment failed for inode: 0x361d offset: 0x6c04 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  568.862219][T13161] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  568.880392][T13162] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  568.888817][T13162] ref_ctr increment failed for inode: 0x361d offset: 0x27 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  568.910099][T13163] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:29 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8d08000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  568.933159][T13151] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  568.941556][T13151] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  568.953593][T13151] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  568.961915][T13151] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:29 executing program 4:
r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x17)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00)={<r2=>0x0, 0x0, <r3=>0x0}, &(0x7f0000000e40)=0xc)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000e80), 0x408002, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000ec0)=<r4=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8)
stat(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000180)="dc4a2e7320b14553c332333b3458bbe4d093126e77e6c9b83ccb35aab729b7c7740bfa8379cdeba26e9e5c9e6a8262a33d33e38b6df96c38ec935253bf4831ed6c593107b35a9a3da8f4dd9ebd9e873c02ed984f6eb11efe5af547c19235ae68cf7cb1b5f8e8ea2cfccc4999efaeb9fc499ae38e8f57066165dcda3a95a5834c2a38ce65d8fd97fc121d6935ad58967444bf528d1998359b19269b89ae904e82f743e31cde4f8be11f59b6e4b94f445e666a115a9e349b7e9f8c6f87617c03b429a00e029843535154915625ef43d523aeb1ab27ad1e8865ce0c48ada43ad9a7a9", 0xe1}, {&(0x7f0000000300)="aec984a124858b2488756728ada62f6bb4362408b799b4467a938ac17f3b9bfbfda56571f9725fcb4140e4278ac9c19d34b3841b0eca300f884f58a185f1a494422c5d3bc8", 0x45}, {&(0x7f0000000400)="9ad4e4d711354d1ba39bc283a9f0588030f0e83a5ce177abb81e76137f34c647968b4b11103431dbaa1d230e7d4ff173ca3b2664e77b82e894ee70bd8e14cfcc8dcfd8fd0f660abbd570a53fca62fd28ba60daad81476047ebfccc00a7211835cc42bc6a046e326fbe1050ee0a8b13ca43a7d6aa6d3fe9006ecd99839c0e4a754bfd007632a59e1a6669a6bb3019aa2bf28ae138b61484a01f5e81ef407f1916a9a1206b08540d392467a8b88a208cc2fc551dabb4350e3b", 0xb8}, {&(0x7f00000004c0)="1f182e26dfd616f020ab05e806829627259e7bc08c820b5f2cade7e1d473c1dd55d81c69cc312723828bf24d7dbe410d5b0f47a554f5595744dae979a65e3dd9966006c661cd435df75fa6999fa4d0ec5066fbb4f930bc1ca796fcea9377d27f8ea3f60ab51d9a72af63778bc3236c285b3ea7528df070e740b08a25cb851ff7f7f9e9f9cf5da6ac89c4bf87f644964d0809ea8488c11214dd2767aa1c0417e064d3ce405834b893fa74d8000000000000000000", 0xb4}, {&(0x7f0000000040)="29c43676e6ca594df9e3e729d069cbe3d898058f58b18dccf478e3cfdcabf965d0f25a1d8bd8867291776af1e40fe45b", 0x30}, {&(0x7f0000000580)="a214f826c0e7cb1bbaafbb2cee4aa3d7b9e536bc64bbd6f3553a1a92c9616a06c328d4c52cce45b3b8d5702499e7638f22c6560e78467e546079dcc7697d42bf417f367fd521ee5e0f8b57d727eb7e64dab5ad1f837cb520d1b60074327c5c0737f5c3dd5a28648c888eb38006e67997a5b48fe66e68e383832e0f06cd7e9380d1afeb1e3974b65bdd777e1e3952ba2a9ef3b01a8f93e50f2f", 0x99}, {&(0x7f0000000640)="4bf7f11ddcdb05110b7fb171bf13742327a5e89c8d2c262c996e9e0d7c595bda1ca88256258e1f4b44bc0436a83158935660f858108becb76cb3ed5a420a64c80e405ef5112003ed67ca49d45bf40c8f2fca541aed2346214a5a0848b05dac83f77437fd9f3007a990610585a26dfbb459087133e08e10c4266708e45086f17897f3b9d54678f586aa6f46eabe99e1f13d37a1540732f56d49c9dd902904d2709acc8d01aa8930fd", 0xa8}], 0x7, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r3}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01}}}], 0x78, 0x40080d0}, 0x0)
r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r7, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r7, r8, 0x0, 0x1c500)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0)
preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  569.044767][T13151] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  569.053205][T13151] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  569.076605][T13151] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:29 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c05}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:29 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xb00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  569.084908][T13151] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  569.104664][T13165] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  569.128877][T13171] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:29 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x48}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:29 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  569.159447][T13181] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  569.161434][T13180] loop4: detected capacity change from 0 to 264192
[  569.167728][T13181] ref_ctr increment failed for inode: 0x361d offset: 0x6c05 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:29 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xba01000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  569.218640][T13183] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  569.234305][T13184] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:29 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c06}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:29 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  569.288037][T13189] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  569.296757][T13189] ref_ctr increment failed for inode: 0x361d offset: 0x48 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  569.326568][T13196] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  569.367765][T13190] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  569.376141][T13190] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  569.388488][T13190] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  569.398546][T13190] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  569.460873][T13190] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  569.469199][T13190] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  569.495663][T13190] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  569.504102][T13190] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  569.522159][T13198] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  569.537723][T13204] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:29 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  569.563816][T13205] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  569.572114][T13205] ref_ctr increment failed for inode: 0x361d offset: 0x6c06 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:30 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c02}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  569.609737][T13206] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  569.630233][T13208] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:30 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc002000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:30 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xd00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  569.672572][T13209] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  569.680827][T13209] ref_ctr increment failed for inode: 0x361d offset: 0x4c ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  569.729762][T13214] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  569.737999][T13214] ref_ctr increment failed for inode: 0x361d offset: 0x6c02 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  569.778133][T13214] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  569.786223][T13214] ref_ctr decrement failed for inode: 0x361d offset: 0x6c02 ref_ctr_offset: 0x8 of mm: 0x0000000092004929
[  569.806198][T13214] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  569.814299][T13214] ref_ctr decrement failed for inode: 0x361d offset: 0x6c02 ref_ctr_offset: 0x8 of mm: 0x0000000092004929
[  569.827900][T13217] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  569.841998][T13219] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  569.860830][T13222] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  569.869098][T13222] ref_ctr increment failed for inode: 0x361d offset: 0x6c02 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  569.889354][T13222] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  569.897499][T13222] ref_ctr decrement failed for inode: 0x361d offset: 0x6c02 ref_ctr_offset: 0x8 of mm: 0x0000000092004929
[  569.912180][T13223] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  569.929994][T13224] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:30 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x60}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:30 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c07}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:30 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c03}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:30 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xe83a1b0000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:30 executing program 4:
r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
write$9p(r1, &(0x7f0000000140)="efc438b3a0f92c8162efed94c6a31229b003bd99679392b72659cc26d151efef7b810c9d1a01ab8f922add84a3c2", 0x2e)
pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="6f823216a9ca79781b8cce89065a1262429f4db53a1c83d4ae4e53c4e390ea3714963689c3804a4327aa23ef6406", 0x2e}], 0x1, 0x6, 0x5)
sendfile(r1, r2, 0x0, 0x1c500)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:30 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xe00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  570.019860][T13232] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.028174][T13232] ref_ctr increment failed for inode: 0x361d offset: 0x6c03 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  570.055431][T13243] loop4: detected capacity change from 0 to 264192
[  570.063528][T13236] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  570.092696][T13235] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.100945][T13235] ref_ctr increment failed for inode: 0x361d offset: 0x6c07 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  570.157361][T13237] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.165649][T13237] ref_ctr increment failed for inode: 0x361d offset: 0x60 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  570.190739][T13238] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:30 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c04}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:30 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  570.205137][T13249] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:30 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c08}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:30 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x68}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:30 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf400000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  570.255814][T13252] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  570.270696][T13257] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  570.319468][T13258] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.327927][T13258] ref_ctr increment failed for inode: 0x361d offset: 0x6c04 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  570.369537][T13262] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.377896][T13262] ref_ctr increment failed for inode: 0x361d offset: 0x6c08 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  570.407580][T13264] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:30 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  570.424236][T13265] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.432619][T13265] ref_ctr increment failed for inode: 0x361d offset: 0x68 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:30 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
r3 = socket$inet6(0xa, 0xa, 0x5918)
preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000100)=""/84, 0x54}], 0x2, 0x1, 0x80)
r4 = syz_io_uring_complete(0x0)
ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f0000000040))
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:30 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c05}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  570.476310][T13267] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  570.497265][T13268] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.505920][T13268] ref_ctr increment failed for inode: 0x361d offset: 0x6c08 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:30 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c09}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:30 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  570.531836][T13274] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  570.548268][T13275] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:31 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xf6ffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  570.584059][T13279] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.592424][T13279] ref_ctr increment failed for inode: 0x361d offset: 0x6c05 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  570.604854][T13289] loop4: detected capacity change from 0 to 264192
06:11:31 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  570.626978][T13283] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  570.646227][T13292] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.654678][T13292] ref_ctr increment failed for inode: 0x361d offset: 0x6c ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  570.685108][T13291] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.693348][T13291] ref_ctr increment failed for inode: 0x361d offset: 0x6c09 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:31 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c06}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  570.725783][T13295] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  570.743592][T13302] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:31 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x74}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:31 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c0a}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  570.796104][T13303] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.804534][T13303] ref_ctr increment failed for inode: 0x361d offset: 0x6c09 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  570.828183][T13304] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:31 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfeffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:31 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  570.856388][T13307] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  570.882280][T13309] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.890876][T13309] ref_ctr increment failed for inode: 0x361d offset: 0x6c06 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  570.930116][T13311] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.938628][T13311] ref_ctr increment failed for inode: 0x361d offset: 0x74 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  570.964785][T13313] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  570.973170][T13313] ref_ctr increment failed for inode: 0x361d offset: 0x6c0a ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:31 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c07}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  571.003432][T13317] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  571.014785][T13319] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  571.049436][T13322] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  571.057890][T13322] ref_ctr increment failed for inode: 0x361d offset: 0x6c0a ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  571.089349][T13323] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  571.114281][T13324] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  571.129572][T13328] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  571.137895][T13328] ref_ctr increment failed for inode: 0x361d offset: 0x6c07 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  571.170745][T13331] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  571.179045][T13331] ref_ctr increment failed for inode: 0x361d offset: 0x6c07 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:31 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c0b}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:31 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:31 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffff7f00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:31 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:31 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c08}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:31 executing program 4:
r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000004c0)="77690a07000000000000002d34bfd8ee8b8681eb50d6591be05adcc3b959cc1783f6f6ae8ce20fcc5ade5f09d1c6caa67f52938202d7b58c4cf0790000000000000000007034bfd9c9ab7efe4033ad57d1252dc96d2edd223d341284953e791e9d6fd617ba716f2bba7089c73ce0e7cdfb29a63043c167caccd317710f668950b5d4c2277b50a75d5bd959066b7090cc43679060585a4d93d22c5a5f544d9f7e897a846935193a5b7b9239a4cc19486843218a6b959886b3cf42989cdeb68829f6f0f5d419ea8449bae812a47feb15fd897f57d559874826bee31e9844b202bcf78565e094d0ee26dfa8a3984d5d6e335d40d70cb4d3144b02d57a47a6b21a2a33f577bc59e5a0d23d91cb5c967f3569432f7515b65bd6f246e0537441f997998c4f12421677b1658002ea131c3ba900"/314, 0x13a}], 0x1, 0x5)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x80, 0x44)
sendfile(r1, r2, 0x0, 0x1c500)
chdir(&(0x7f00000001c0)='./file0\x00')
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ppoll(&(0x7f0000000200)=[{r0, 0x248}, {r3, 0xa044}, {r1}], 0x3, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x5]}, 0x8)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
r5 = signalfd(r1, &(0x7f0000000040)={[0x9]}, 0x8)
openat$cgroup_ro(r1, &(0x7f0000000180)='pids.current\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000400)='@\xd2\xa6\x1b{S\xc6\xe3v\xc9\xed \x15|F<[\xdf\xef\xab%q\xa3\x98\xd7z\x15}\x1b\x9d\xee\xfb\x18w\x0e\x87\xbc\xb2\r\xdf;\xe1\xc10?\x9dHd\xec;\xc0>z\xf5\xa5O\xfaI\xb69\xc5w\x82\x84\xe5\xb7', &(0x7f0000000340)='./file2\x00', r5)
fsmount(r1, 0x0, 0x89)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  571.442973][T13339] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  571.466902][T13344] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  571.481125][T13345] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:31 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffff00000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:31 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3c01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  571.497308][T13350] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  571.509863][T13352] loop4: detected capacity change from 0 to 264192
[  571.523792][T13346] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  571.532039][T13346] ref_ctr increment failed for inode: 0x361d offset: 0x6c0b ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  571.579766][T13347] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  571.588084][T13347] ref_ctr increment failed for inode: 0x361d offset: 0x7a ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  571.631624][T13343] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  571.640068][T13343] ref_ctr increment failed for inode: 0x361d offset: 0x6c08 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  571.662632][T13343] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  571.671743][T13343] ref_ctr decrement failed for inode: 0x361d offset: 0x6c08 ref_ctr_offset: 0x8 of mm: 0x000000005cfb2898
[  571.694813][T13343] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  571.702947][T13343] ref_ctr decrement failed for inode: 0x361d offset: 0x6c08 ref_ctr_offset: 0x8 of mm: 0x000000005cfb2898
[  571.716736][T13354] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:32 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c0c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:32 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xef}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  571.728143][T13359] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  571.783090][T13363] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  571.791329][T13363] ref_ctr increment failed for inode: 0x361d offset: 0x6c08 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  571.805269][T13364] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:32 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c09}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  571.823531][T13366] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:32 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:32 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  571.857208][T13370] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  571.865459][T13370] ref_ctr increment failed for inode: 0x361d offset: 0x6c0c ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  571.929825][T13371] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  571.938139][T13371] ref_ctr increment failed for inode: 0x361d offset: 0xef ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  571.960886][T13375] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  571.969107][T13375] ref_ctr increment failed for inode: 0x361d offset: 0x6c09 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  571.992328][T13375] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  572.000456][T13375] ref_ctr decrement failed for inode: 0x361d offset: 0x6c09 ref_ctr_offset: 0x8 of mm: 0x000000005cfb2898
[  572.018832][T13375] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
06:11:32 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c0d}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  572.027137][T13375] ref_ctr decrement failed for inode: 0x361d offset: 0x6c09 ref_ctr_offset: 0x8 of mm: 0x000000005cfb2898
[  572.041179][T13377] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  572.057466][T13380] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:32 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  572.101751][T13382] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  572.110084][T13382] ref_ctr increment failed for inode: 0x361d offset: 0x6c09 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  572.129744][T13383] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:32 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c0a}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:32 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  572.150872][T13386] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  572.182144][T13388] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  572.190426][T13388] ref_ctr increment failed for inode: 0x361d offset: 0x6c0d ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  572.243514][T13390] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  572.252106][T13390] ref_ctr increment failed for inode: 0x361d offset: 0xf0 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  572.272741][T13396] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  572.285226][T13397] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:32 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:32 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r2 = getuid()
setuid(r2)
r3 = getuid()
setuid(r3)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getuid()
setuid(r5)
mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x200000, &(0x7f0000000400)={[{@huge_always}, {@mode={'mode', 0x3d, 0x7}}, {@huge_always}, {@uid={'uid', 0x3d, 0xee00}}, {@size={'size', 0x3d, [0x6b, 0x31, 0x38, 0x70, 0x74, 0x38, 0x32, 0x39, 0x7a]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x71, 0x6d]}}, {@huge_within_size}], [{@euid_lt={'euid<', r2}}, {@subj_role={'subj_role', 0x3d, 'msdos\x00'}}, {@uid_eq={'uid', 0x3d, r3}}, {@uid_gt={'uid>', r4}}, {@smackfshat={'smackfshat', 0x3d, '{;'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, 'msdos\x00'}}, {@appraise}, {@fowner_gt={'fowner>', r5}}]})
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0)
preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  572.293540][T13397] ref_ctr increment failed for inode: 0x361d offset: 0x6c0a ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  572.315588][T13397] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  572.323785][T13397] ref_ctr decrement failed for inode: 0x361d offset: 0x6c0a ref_ctr_offset: 0x8 of mm: 0x000000005cfb2898
06:11:32 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c0e}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:32 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x18a}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  572.373832][T13408] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  572.385744][T13399] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:32 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x6000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  572.420690][T13397] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  572.429104][T13397] ref_ctr increment failed for inode: 0x361d offset: 0x6c0a ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  572.458224][T13409] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:32 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:32 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c0b}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  572.469838][T13422] loop4: detected capacity change from 0 to 264192
[  572.482911][T13412] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  572.491208][T13412] ref_ctr increment failed for inode: 0x361d offset: 0x6c0e ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  572.568210][T13420] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  572.600030][T13424] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  572.608671][T13424] ref_ctr increment failed for inode: 0x361d offset: 0x18a ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  572.633441][T13430] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  572.656616][T13434] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:33 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c10}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  572.665218][T13434] ref_ctr increment failed for inode: 0x361d offset: 0x6c0b ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  572.694130][T13438] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:33 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1b4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:33 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x6800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  572.726998][T13440] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:33 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c0c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:33 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  572.806931][T13445] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  572.815139][T13445] ref_ctr increment failed for inode: 0x361d offset: 0x6c10 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  572.870321][T13447] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  572.878562][T13447] ref_ctr increment failed for inode: 0x361d offset: 0x1b4 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  572.899584][T13450] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  572.917616][T13456] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  572.925819][T13456] ref_ctr increment failed for inode: 0x361d offset: 0x6c0c ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  572.952342][T13455] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  572.969170][T13459] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  573.004932][T13460] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:33 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x274}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  573.013236][T13460] ref_ctr increment failed for inode: 0x361d offset: 0x6c0c ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  573.049679][T13461] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  573.086062][T13466] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  573.094780][T13466] ref_ctr increment failed for inode: 0x361d offset: 0x274 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  573.139036][T13469] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  573.147461][T13469] ref_ctr increment failed for inode: 0x361d offset: 0x274 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:33 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c11}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:33 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x6c00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:33 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:33 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c0d}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:33 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:33 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x184)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  573.342536][T13480] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  573.351407][T13480] ref_ctr increment failed for inode: 0x361d offset: 0x300 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  573.377813][T13487] loop4: detected capacity change from 0 to 264192
[  573.392404][T13481] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  573.400668][T13481] ref_ctr increment failed for inode: 0x361d offset: 0x6c11 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  573.434241][T13479] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  573.453248][T13477] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  573.461765][T13477] ref_ctr increment failed for inode: 0x361d offset: 0x6c0d ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:33 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c12}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  573.492335][T13482] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  573.513021][T13494] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:33 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x500}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:34 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  573.557244][T13495] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  573.565486][T13495] ref_ctr increment failed for inode: 0x361d offset: 0x6c0d ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  573.610491][T13496] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  573.646466][T13499] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:34 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:34 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c0e}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  573.654823][T13499] ref_ctr increment failed for inode: 0x361d offset: 0x6c12 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  573.734604][T13503] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  573.742906][T13503] ref_ctr increment failed for inode: 0x361d offset: 0x500 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  573.768529][T13504] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  573.789413][T13509] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  573.798089][T13509] ref_ctr increment failed for inode: 0x361d offset: 0x6c0e ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  573.828338][T13510] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:34 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x600}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  573.851127][T13513] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:34 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c27}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:34 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7a00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  573.896949][T13514] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  573.905672][T13514] ref_ctr increment failed for inode: 0x361d offset: 0x6c0e ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  573.955952][T13515] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  573.994496][T13518] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:34 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:34 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c10}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  574.002984][T13518] ref_ctr increment failed for inode: 0x361d offset: 0x600 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  574.075413][T13522] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  574.085203][T13522] ref_ctr increment failed for inode: 0x361d offset: 0x6c27 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  574.116092][T13523] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  574.135105][T13529] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  574.143535][T13529] ref_ctr increment failed for inode: 0x361d offset: 0x6c10 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:34 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xba01}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  574.176046][T13528] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  574.195406][T13532] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:34 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000040)='./file0\x00')
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x400, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00')
sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000002400040003000000fbdbdf250200000006000400000000000600044000000000060004000000000006000400000000000600040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:34 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x700}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:34 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c48}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:34 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c11}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  574.254112][T13534] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:34 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  574.308206][T13540] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  574.321801][T13551] loop4: detected capacity change from 0 to 264192
[  574.331025][T13550] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  574.339878][T13550] ref_ctr increment failed for inode: 0x361d offset: 0x700 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  574.388084][T13552] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  574.396997][T13552] ref_ctr increment failed for inode: 0x361d offset: 0x6c11 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  574.430557][T13553] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  574.439151][T13553] ref_ctr increment failed for inode: 0x361d offset: 0x6c48 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  574.467321][T13556] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:34 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xc002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:34 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c12}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  574.478715][T13557] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:34 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x708}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  574.530087][T13564] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  574.539134][T13564] ref_ctr increment failed for inode: 0x361d offset: 0x6c48 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  574.570095][T13565] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:35 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:35 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c4c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  574.616386][T13573] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  574.624956][T13573] ref_ctr increment failed for inode: 0x361d offset: 0x708 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  574.682866][T13572] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  574.701693][T13571] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  574.709926][T13571] ref_ctr increment failed for inode: 0x361d offset: 0x6c12 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  574.737378][T13578] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  574.753969][T13581] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:35 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xf400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:35 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x807}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  574.782037][T13582] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  574.790379][T13582] ref_ctr increment failed for inode: 0x361d offset: 0x6c12 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  574.813229][T13583] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  574.850263][T13587] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  574.858859][T13587] ref_ctr increment failed for inode: 0x361d offset: 0x807 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  574.895911][T13588] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  574.929436][T13593] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  574.937674][T13593] ref_ctr increment failed for inode: 0x361d offset: 0x807 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  574.959598][T13594] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:35 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17, 0x8000000000000}], 0x8b4008, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
open$dir(&(0x7f0000000040)='./file1\x00', 0x101000, 0x100)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
mount$9p_xen(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x2802043, &(0x7f00000003c0)={'trans=xen,', {[{@cache_none}, {@version_L}, {@version_L}], [{@fowner_lt={'fowner<', r2}}, {@obj_role={'obj_role', 0x3d, 'msdos\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'msdos\x00'}}, {@pcr={'pcr', 0x3d, 0x35}}, {@smackfsdef={'smackfsdef', 0x3d, '[)&$'}}]}})
open(&(0x7f0000000140)='./file1\x00', 0x507842, 0x290)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x0, 0x2, 0x5)

06:11:35 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c27}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:35 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:35 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c68}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:35 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x900}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:35 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x20000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  575.195596][T13600] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  575.204194][T13600] ref_ctr increment failed for inode: 0x361d offset: 0x6c27 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  575.234773][T13612] loop4: detected capacity change from 0 to 264192
[  575.242878][T13606] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  575.265824][T13603] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  575.274092][T13603] ref_ctr increment failed for inode: 0x361d offset: 0x900 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  575.309196][T13605] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  575.317451][T13605] ref_ctr increment failed for inode: 0x361d offset: 0x6c68 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  575.347875][T13608] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:35 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c48}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:35 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x40000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  575.363575][T13617] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  575.382124][T13618] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  575.390363][T13618] ref_ctr increment failed for inode: 0x361d offset: 0x900 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:35 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:35 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c6c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:35 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  575.418713][T13622] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  575.448448][T13627] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  575.456737][T13627] ref_ctr increment failed for inode: 0x361d offset: 0x6c48 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  575.500235][T13632] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  575.508847][T13632] ref_ctr increment failed for inode: 0x361d offset: 0xa00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  575.525710][T13632] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  575.533900][T13632] ref_ctr decrement failed for inode: 0x361d offset: 0xa00 ref_ctr_offset: 0x8 of mm: 0x000000004cc49457
[  575.549353][T13632] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  575.557526][T13632] ref_ctr decrement failed for inode: 0x361d offset: 0xa00 ref_ctr_offset: 0x8 of mm: 0x000000004cc49457
[  575.577438][T13633] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  575.585800][T13633] ref_ctr increment failed for inode: 0x361d offset: 0x6c6c ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  575.610288][T13634] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  575.621459][T13636] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  575.647431][T13639] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:36 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  575.655784][T13639] ref_ctr increment failed for inode: 0x361d offset: 0x6c6c ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  575.685676][T13640] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  575.713746][T13641] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  575.734903][T13644] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  575.743143][T13644] ref_ctr increment failed for inode: 0x361d offset: 0xb00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  575.759941][T13644] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  575.768349][T13644] ref_ctr decrement failed for inode: 0x361d offset: 0xb00 ref_ctr_offset: 0x8 of mm: 0x000000004cc49457
[  575.782751][T13644] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  575.790872][T13644] ref_ctr decrement failed for inode: 0x361d offset: 0xb00 ref_ctr_offset: 0x8 of mm: 0x000000004cc49457
[  575.812198][T13648] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  575.820737][T13648] ref_ctr increment failed for inode: 0x361d offset: 0xb00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  575.837318][T13648] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  575.845424][T13648] ref_ctr decrement failed for inode: 0x361d offset: 0xb00 ref_ctr_offset: 0x8 of mm: 0x000000004cc49457
[  576.064607][T13620] loop4: detected capacity change from 0 to 264192
06:11:36 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c74}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:36 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c4c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:36 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1b3ae8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:36 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:36 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:36 executing program 4:
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$search(0x1d, r0, 0x0, 0x0, 0x0)
keyctl$unlink(0x9, 0x0, r0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = open(&(0x7f0000000100)='./file1\x00', 0x733140, 0xbb)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
acct(0x0)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r1, r2, 0x0, 0x1c500)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
pwritev(r3, &(0x7f0000000300)=[{&(0x7f0000000140)="f3cce1f03589124c9584d1585b1a385e44ad54be45266691cbd3a73e9790c6144cb8458aefc0fc56e1f412b256fc222ab1d8aff36a9738a81f0b151fddd7481f697ae4bc872b23a16211f0f3c51295780e9f4b9789d775953ac37f383edce7c940c2b776218469ed38a166cfe8dd37c8fd5b89686222259c151f0a1ea4ebc859b2510740f8290267238b", 0x8a}, {&(0x7f0000000200)="b20bfc7a1d7f558c333cc05ed7937bce7ae37fab74d9ce4a8e1c10d4a5d1a11d4c4bca84df5f6d53ae2f112aa71411089643c18961f45f9b1244becdf5b64823799afb16e945f769a003398dc510a34f35c2d37adac75327aa071107b4f595fa3a5bb0100fabfb75", 0x68}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f00000000c0)="dee965d714c44a20c6ffed563a77bf3de48d2b744377798a44329c55c003c0e307f6ae7272e49b9e9847d3cf1a0a16e64d0bd57c7a35154f6e", 0x39}, {&(0x7f0000000280)}], 0x6, 0x7a4, 0x7)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  576.158451][T13662] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  576.167055][T13662] ref_ctr increment failed for inode: 0x361d offset: 0x6c74 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  576.189397][T13668] loop4: detected capacity change from 0 to 264192
06:11:36 executing program 4:
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000100))
r3 = epoll_create(0x2e0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x100000)

[  576.202104][T13664] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  576.210481][T13664] ref_ctr increment failed for inode: 0x361d offset: 0xc00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  576.231843][T13666] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:36 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c7a}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  576.248602][T13665] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  576.274815][T13675] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  576.283132][T13675] ref_ctr increment failed for inode: 0x361d offset: 0xc00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  576.290022][T13681] loop4: detected capacity change from 0 to 264192
06:11:36 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xd00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:36 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:36 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c68}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:36 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x400001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  576.306416][T13677] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  576.340857][T13679] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  576.398480][T13690] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  576.406757][T13690] ref_ctr increment failed for inode: 0x361d offset: 0xd00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:36 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1b3ae8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  576.438631][T13699] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  576.456832][T13696] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  576.478971][T13701] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:36 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  576.487264][T13701] ref_ctr increment failed for inode: 0x361d offset: 0xd00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  576.516228][T13700] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  576.524458][T13700] ref_ctr increment failed for inode: 0x361d offset: 0x6c68 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:37 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:37 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  576.573010][T13702] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  576.584806][T13703] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  576.606274][T13709] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  576.614537][T13709] ref_ctr increment failed for inode: 0x361d offset: 0xe00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:37 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:37 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c6c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  576.665148][T13714] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  576.705077][T13715] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  576.735125][T13722] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  576.781956][T13726] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  576.799352][T13725] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  576.807667][T13725] ref_ctr increment failed for inode: 0x361d offset: 0x6c6c ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  576.855347][T13718] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  576.863636][T13718] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  576.875471][T13718] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  576.883719][T13718] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  576.938552][T13718] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  576.946850][T13718] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  576.959038][T13718] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  576.967320][T13718] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  577.021352][T13718] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.029682][T13718] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  577.045349][T13718] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.053788][T13718] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:37 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1004000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:37 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:37 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:37 executing program 4:
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000001840)='./file0\x00', 0x10000, 0x5, &(0x7f0000002b80)=[{&(0x7f0000001880)="5b81e4eec5c498e6c5dddae87d25f8d8ab617c740850b3a5d08233689eee0e6013b8e58177270e557c05e1dd74a8ea403a89b2f465480a6abc758f428a34907f28451511965f9602ed8983b29913162ab16fee624efc3077fdcc81aab00e3727dae044bf94546aa3f3ad3649b4b356c67d2f6986c9700de6588122ad1c5847e2878b3f19318c513313d00ff41f2ebb2f0178e8ee03ece1d9ec46f7d14f0106", 0x9f, 0x5}, {&(0x7f0000001940)="a6e9d447358171b7a6e31b7bdad2823c4e89494701b9bd534f898789bb0b4585993d8d29af46ca0b76cc2fa9664f096a429eda1c44cef9e551ccd9f10e3ad81854ece020ea4cba997beff0603c6ef421ccc750d6d2a32db8f492", 0x5a, 0x7}, {&(0x7f00000019c0)="67b4138de47cd16efc11ccae117288ac876480a548ccfd0d25072b687bbc92dbc9203ae5fe6702c2c61dc51700798a9971b0d82068c0d03552501e0123615e5f0f94a5b85cd5310ae8c110b40b4396ac97842f57d4ce0ea497d8883b49c179c6db2e17e4881846f7500dd1f1a9f5ab7a1ccf57e4b9d9f88a3e9057c27cbf5c1167ebea077a813bfc53a4e32c3fdb7ea4ff67c3af185a85bb371736988f363e6d08a06ca15e59210da0486d46a848eb551a815032e31db749dd396c5728aee4f4acbab2f81eecce2b0e46", 0xca, 0x9}, {&(0x7f0000001ac0)="296a95edc46393f9f3a1febe4a5c15962c985681a19f9836d35177a4edc6f6227299677f802952427d5cf386052b4632f548d037a7bdd4c352345c409400bdeda7816536942f8e2175aa28b645ce436b9c76f1415c0376e81be4645b7292e393dcb0ace1869ac9aee8d7bf09e3be9fa1c2cb6c3df92faf458ab6b5af95367f7baec749f8b947d06569a6fe79cfdc", 0x8e, 0x3}, {&(0x7f0000001b80)="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", 0x1000, 0x4}], 0x200002, &(0x7f0000002c00)={[{@data_err_abort}], [{@obj_role={'obj_role', 0x3d, '-$(]^(:\\:.*}'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]})
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f00000017c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001440)=""/143, 0x8f}, {&(0x7f0000001500)=""/136, 0x88}, {&(0x7f00000015c0)=""/236, 0xec}, {&(0x7f00000016c0)=""/250, 0xfa}, {&(0x7f0000000300)=""/68, 0x44}], 0x8, 0xd9f, 0xfffffffd)

06:11:37 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c74}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:37 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  577.109369][T13718] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.117881][T13718] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  577.131026][T13718] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.139401][T13718] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  577.189351][T13738] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  577.216339][T13744] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  577.224832][T13744] ref_ctr increment failed for inode: 0x361d offset: 0xf00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  577.242363][T13749] loop4: detected capacity change from 0 to 264192
[  577.251694][T13749] FAT-fs (loop4): bogus number of reserved sectors
[  577.258279][T13749] FAT-fs (loop4): Can't find a valid FAT filesystem
[  577.270793][T13739] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  577.279000][T13739] ref_ctr increment failed for inode: 0x361d offset: 0x6c74 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:37 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  577.306033][T13740] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  577.329395][T13747] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:37 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:37 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c7a}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:37 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  577.351812][T13756] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  577.405461][T13742] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.414126][T13742] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  577.426341][T13742] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.434735][T13742] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  577.492262][T13742] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.500663][T13742] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  577.512543][T13742] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.520835][T13742] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  577.534960][T13761] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  577.547687][T13765] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  577.555878][T13765] ref_ctr increment failed for inode: 0x361d offset: 0x1100 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  577.572597][T13765] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  577.580824][T13765] ref_ctr decrement failed for inode: 0x361d offset: 0x1100 ref_ctr_offset: 0x8 of mm: 0x000000003f52658c
[  577.596215][T13765] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  577.604943][T13765] ref_ctr decrement failed for inode: 0x361d offset: 0x1100 ref_ctr_offset: 0x8 of mm: 0x000000003f52658c
[  577.621201][T13771] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:38 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:38 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  577.644143][T13772] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  577.665257][T13774] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  577.673880][T13774] ref_ctr increment failed for inode: 0x361d offset: 0x1100 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:38 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1b3ae8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:38 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1200}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  577.708940][T13778] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:38 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  577.749319][T13781] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  577.779666][T13791] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  577.816163][T13777] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.824642][T13777] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  577.836535][T13777] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.844929][T13777] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  577.899189][T13777] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.907825][T13777] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  577.919766][T13777] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  577.928098][T13777] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  577.942809][T13789] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  577.951096][T13789] ref_ctr increment failed for inode: 0x361d offset: 0x1200 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  577.967252][T13789] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  577.975270][T13789] ref_ctr decrement failed for inode: 0x361d offset: 0x1200 ref_ctr_offset: 0x8 of mm: 0x000000003f52658c
[  577.991357][T13789] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  577.999392][T13789] ref_ctr decrement failed for inode: 0x361d offset: 0x1200 ref_ctr_offset: 0x8 of mm: 0x000000003f52658c
[  578.012417][T13793] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  578.031193][T13796] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  578.039394][T13796] ref_ctr increment failed for inode: 0x361d offset: 0x1200 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  578.055508][T13796] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  578.063595][T13796] ref_ctr decrement failed for inode: 0x361d offset: 0x1200 ref_ctr_offset: 0x8 of mm: 0x000000003f52658c
[  578.080627][T13757] loop4: detected capacity change from 0 to 264192
[  578.087280][T13797] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:38 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:38 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:38 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:38 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x25}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:38 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1433}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:38 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066618f27185cc10d74000404090a02", 0x17}], 0x0, &(0x7f0000000100)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  578.106480][T13757] FAT-fs (loop4): Unrecognized mount option "f�ÿ%úÿ" or missing value
[  578.158324][T13813] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  578.183823][T13811] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  578.184451][T13820] loop4: detected capacity change from 0 to 264192
[  578.208596][T13820] FAT-fs (loop4): invalid media value (0x0a)
[  578.214795][T13820] FAT-fs (loop4): Can't find a valid FAT filesystem
[  578.227578][T13818] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  578.235830][T13818] ref_ctr increment failed for inode: 0x361d offset: 0x1433 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:38 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  578.256617][T13822] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  578.266752][T13820] loop4: detected capacity change from 0 to 264192
[  578.270168][T13824] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  578.289349][T13820] FAT-fs (loop4): Unrecognized mount option "0ÑO" or missing value
06:11:38 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x40)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:38 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4030000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  578.310685][T13806] ref_ctr going negative. vaddr: 0x20000008, curr val: 0, delta: -1
[  578.319133][T13806] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x0000000074d9b274
[  578.343262][T13806] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  578.351813][T13806] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  578.364057][T13806] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  578.372390][T13806] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  578.433902][T13806] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  578.442387][T13806] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  578.443852][T13841] loop4: detected capacity change from 0 to 264192
[  578.454564][T13806] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  578.468682][T13806] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:38 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:38 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1434}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  578.495458][T13838] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  578.527518][T13840] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:38 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:39 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x5000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:39 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  578.554564][T13847] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  578.570225][T13848] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  578.633157][T13855] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  578.641844][T13855] ref_ctr increment failed for inode: 0x361d offset: 0x1434 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  578.693016][T13857] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  578.704531][T13858] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  578.725371][T13863] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:39 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  578.733704][T13863] ref_ctr increment failed for inode: 0x361d offset: 0x1434 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  578.769334][T13850] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  578.778255][T13850] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  578.791681][T13850] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  578.800380][T13850] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  578.880038][T13850] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  578.888777][T13850] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  578.900282][T13850] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  578.908566][T13850] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:39 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  578.923382][T13864] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  578.937896][T13865] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:39 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:39 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x6000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  578.983517][T13868] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  578.991823][T13868] ref_ctr increment failed for inode: 0x361d offset: 0x2000 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:39 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  579.093156][T13874] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  579.119848][T13877] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  579.128182][T13877] ref_ctr increment failed for inode: 0x361d offset: 0x2000 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  579.145691][T13878] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  579.172465][T13870] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  579.180899][T13870] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  579.192981][T13870] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  579.201265][T13870] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  579.261444][T13870] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  579.269796][T13870] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  579.285010][T13870] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  579.293567][T13870] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:39 executing program 4:
r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r1, r2, 0x0, 0x1c500)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
openat(r0, &(0x7f0000000040)='./file1\x00', 0x400, 0x10)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x31)

06:11:39 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2500}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:39 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x60}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:39 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  579.325383][T13882] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  579.338137][T13883] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  579.359414][T13888] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:39 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  579.367745][T13888] ref_ctr increment failed for inode: 0x361d offset: 0x2500 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  579.414669][T13900] loop4: detected capacity change from 0 to 264192
[  579.424571][    C1] ==================================================================
[  579.432991][    C1] BUG: KCSAN: data-race in kthread_is_per_cpu / page_cache_ra_unbounded
[  579.441540][    C1] 
[  579.444217][    C1] write to 0xffff88812f9660ac of 4 bytes by task 13897 on cpu 0:
[  579.452017][    C1]  page_cache_ra_unbounded+0xa8/0x410
[  579.457387][    C1]  force_page_cache_ra+0x246/0x280
[  579.462522][    C1]  page_cache_sync_ra+0xcc/0xe0
[  579.467607][    C1]  filemap_read+0x388/0x1230
[  579.472407][    C1]  generic_file_read_iter+0x75/0x2c0
[  579.477978][    C1]  blkdev_read_iter+0xb9/0xf0
[  579.483779][    C1]  vfs_read+0x565/0x5d0
[  579.488045][    C1]  ksys_read+0xce/0x180
[  579.492182][    C1]  __x64_sys_read+0x3e/0x50
[  579.496901][    C1]  do_syscall_64+0x4a/0x90
[  579.501307][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  579.507371][    C1] 
[  579.509731][    C1] read to 0xffff88812f9660ac of 4 bytes by interrupt on cpu 1:
[  579.517363][    C1]  kthread_is_per_cpu+0x2d/0x80
[  579.522203][    C1]  can_migrate_task+0xf/0x180
[  579.526861][    C1]  detach_tasks+0xab/0x380
[  579.531254][    C1]  load_balance+0x768/0xcc0
[  579.535735][    C1]  rebalance_domains+0x1ae/0x2d0
[  579.540748][    C1]  __do_softirq+0x12c/0x275
[  579.546043][    C1]  __irq_exit_rcu+0xa5/0xb0
[  579.550537][    C1]  sysvec_apic_timer_interrupt+0x69/0x80
[  579.556168][    C1]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[  579.562685][    C1]  kcsan_setup_watchpoint+0x436/0x470
[  579.568046][    C1]  memcmp+0x33/0x60
[  579.571938][    C1]  memcmp_pages+0x89/0xe0
[  579.576245][    C1]  uprobe_write_opcode+0x63f/0x1050
[  579.581439][    C1]  set_orig_insn+0x2c/0x40
[  579.586092][    C1]  register_for_each_vma+0x7ae/0x890
[  579.591356][    C1]  uprobe_apply+0x8b/0x260
[  579.595750][    C1]  uprobe_perf_close+0x2f8/0x370
[  579.600667][    C1]  trace_uprobe_register+0x156/0x410
[  579.605929][    C1]  perf_uprobe_destroy+0x58/0x90
[  579.610909][    C1]  _free_event+0x7db/0x9a0
[  579.615311][    C1]  perf_event_release_kernel+0x7bc/0x830
[  579.620947][    C1]  perf_release+0x21/0x30
[  579.625533][    C1]  __fput+0x25b/0x4e0
[  579.629499][    C1]  ____fput+0x11/0x20
[  579.633488][    C1]  task_work_run+0xae/0x130
[  579.638099][    C1]  exit_to_user_mode_prepare+0x156/0x190
[  579.643719][    C1]  syscall_exit_to_user_mode+0x20/0x40
[  579.649178][    C1]  do_syscall_64+0x56/0x90
[  579.653571][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  579.659463][    C1] 
[  579.661875][    C1] Reported by Kernel Concurrency Sanitizer on:
[  579.668007][    C1] CPU: 1 PID: 13880 Comm: syz-executor.2 Tainted: G        W         5.13.0-rc2-syzkaller #0
[  579.678453][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  579.688581][    C1] ==================================================================
[  579.703434][T13880] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:40 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2700}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:40 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/165, 0xa5)

[  579.711872][T13880] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  579.731066][T13880] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  579.739803][T13880] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  579.818217][T13880] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  579.826381][T13913] loop4: detected capacity change from 0 to 264192
[  579.826668][T13880] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  579.845075][T13880] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  579.853328][T13880] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  579.868728][T13894] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  579.889652][T13893] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  579.921107][T13914] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  579.929508][T13914] ref_ctr increment failed for inode: 0x361d offset: 0x2700 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  579.960387][T13918] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:40 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:40 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:40 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x68}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  579.984769][T13919] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  580.042944][T13895] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.051454][T13895] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  580.064017][T13895] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.072324][T13895] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:40 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3314}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  580.138540][T13895] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.147376][T13895] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  580.158954][T13895] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.167405][T13895] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  580.210328][T13928] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  580.221659][T13929] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  580.249566][T13895] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.257889][T13895] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  580.270323][T13895] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.278599][T13895] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  580.338542][T13895] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.346899][T13895] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  580.359333][T13895] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.368009][T13895] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:40 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:40 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:40 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  580.383781][T13932] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  580.411154][T13931] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  580.419581][T13931] ref_ctr increment failed for inode: 0x361d offset: 0x3314 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:40 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  580.510482][T13933] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:41 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3414}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  580.551823][T13943] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  580.571799][T13944] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  580.580128][T13944] ref_ctr increment failed for inode: 0x361d offset: 0x3314 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:41 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000000100)=0x9, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
statfs(&(0x7f0000000140)='./file1\x00', &(0x7f0000000400)=""/162)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000740)=0x40, 0x4b3)
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r4)
splice(r3, 0x0, r4, 0x0, 0x10000, 0x0)
preadv(r4, &(0x7f0000000280), 0x0, 0xd9f, 0x1)
r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x400)
preadv(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/182, 0xb6}], 0x1, 0x7, 0x9)

[  580.611238][T13935] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.619668][T13935] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  580.631972][T13935] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.640370][T13935] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  580.727234][T13935] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.735594][T13935] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  580.738385][T13957] loop4: detected capacity change from 0 to 264192
[  580.747840][T13935] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  580.763016][T13935] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:41 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xa000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  580.784463][T13946] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  580.796515][T13947] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:41 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  580.833065][T13956] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  580.841497][T13956] ref_ctr increment failed for inode: 0x361d offset: 0x3414 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:41 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:41 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  580.886927][T13964] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  580.905358][T13970] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:41 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xb000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:41 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3f00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  580.958065][T13976] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  581.007835][T13968] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.016155][T13968] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  581.028502][T13968] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.037032][T13968] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  581.101227][T13968] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.109581][T13968] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  581.123094][T13968] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.131417][T13968] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:41 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  581.145539][T13978] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  581.170236][T13982] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  581.178586][T13982] ref_ctr increment failed for inode: 0x361d offset: 0x3f00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:41 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:41 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  581.228809][T13983] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  581.243535][T13985] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:41 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  581.309466][T13990] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:41 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xc000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  581.361126][T13986] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.369593][T13986] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  581.387092][T13986] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.395406][T13986] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  581.473568][T13986] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.481910][T13986] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  581.497511][T13986] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.505919][T13986] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:42 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
creat(&(0x7f0000000040)='./file2\x00', 0x2)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  581.534760][T13996] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  581.553117][T13999] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  581.561421][T13999] ref_ctr increment failed for inode: 0x361d offset: 0x4800 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:42 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  581.598760][T14000] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  581.626184][T14006] loop4: detected capacity change from 0 to 264192
[  581.634081][T13992] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.642493][T13992] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  581.658618][T13992] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.667276][T13992] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  581.741250][T13992] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.749848][T13992] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  581.768216][T13992] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.776730][T13992] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:42 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:42 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xf4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  581.791179][T14001] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  581.806112][T14008] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:42 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xd000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:42 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  581.901170][T14014] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.909567][T14014] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  581.921726][T14014] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  581.930093][T14014] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  581.994886][T14014] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.003381][T14014] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  582.021983][T14014] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.030326][T14014] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  582.045417][T14020] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  582.063131][T14019] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  582.071503][T14019] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:42 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  582.108346][T14025] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  582.144022][T14027] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:42 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x13c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  582.162663][T14028] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  582.171025][T14028] ref_ctr increment failed for inode: 0x361d offset: 0x4c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:42 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  582.223687][T14024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.232595][T14024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  582.246741][T14024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.255100][T14024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  582.323854][T14024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.332257][T14024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  582.344412][T14024] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.352784][T14024] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:42 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xe000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  582.367401][T14029] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  582.403043][T14035] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  582.426694][T14039] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:42 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:42 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @empty}, {0x1, @local}, 0x12, {0x2, 0x4e24, @loopback}, 'veth0_to_bond\x00'})
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r2, 0x0, 0x1c500)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  582.467513][T14032] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.475858][T14032] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  582.488721][T14032] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.497218][T14032] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  582.551459][T14032] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.560049][T14032] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  582.571987][T14032] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.580296][T14032] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:43 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6800}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:43 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1ba}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  582.597048][T14040] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  582.603304][T14053] loop4: detected capacity change from 0 to 264192
[  582.623862][T14045] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:43 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x10000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:43 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  582.704876][T14060] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  582.713172][T14060] ref_ctr increment failed for inode: 0x361d offset: 0x6800 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  582.780299][T14047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.788721][T14047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  582.801060][T14047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.809347][T14047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  582.866166][T14047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.874486][T14047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  582.886675][T14047] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  582.894955][T14047] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:43 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:43 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  582.909652][T14064] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  582.921608][T14063] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  582.953489][T14070] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:43 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x11000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  583.023939][T14066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.032235][T14066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  583.044512][T14066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.052762][T14066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  583.115499][T14066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.123966][T14066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  583.138360][T14066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.146670][T14066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:43 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2c0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  583.162286][T14071] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  583.197953][T14078] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  583.236997][T14066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.245751][T14066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  583.258027][T14066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.266375][T14066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  583.327737][T14066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.336240][T14066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  583.348533][T14066] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.356850][T14066] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:43 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:43 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7400}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  583.372758][T14081] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  583.405370][T14084] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:43 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0xc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:43 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x0)

06:11:43 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:43 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x12000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  583.452061][T14088] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  583.516680][T14094] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  583.525000][T14094] ref_ctr increment failed for inode: 0x361d offset: 0x7400 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  583.539084][T14101] loop4: detected capacity change from 0 to 264192
[  583.601021][T14095] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.609451][T14095] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  583.622308][T14095] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.630706][T14095] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  583.687111][T14095] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.695633][T14095] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  583.707958][T14095] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  583.716265][T14095] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:44 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:44 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7402}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  583.731066][T14103] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  583.742466][T14105] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:44 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  583.799887][T14112] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  583.823457][T14113] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:44 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x304}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:44 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x20000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  583.858920][T14118] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  583.867194][T14118] ref_ctr increment failed for inode: 0x361d offset: 0x7402 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  583.947179][T14129] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  583.958827][T14130] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  583.992494][T14116] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.000828][T14116] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  584.013048][T14116] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.021365][T14116] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  584.077554][T14116] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.086109][T14116] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  584.098321][T14116] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.106630][T14116] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:44 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7a00}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:44 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:44 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x403}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  584.123481][T14132] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  584.137678][T14134] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:44 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x25000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  584.203998][T14140] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  584.237035][T14142] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  584.272932][T14138] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.281331][T14138] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  584.292920][T14138] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.301289][T14138] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:44 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:44 executing program 4:
r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
open$dir(&(0x7f0000000300)='./file0\x00', 0x400, 0x10)
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x40, 0x8)
write$9p(r0, &(0x7f0000000100)="3b27a4ba6ee92b4a59073c44c97d024a3b4ce537d0369a5e19f9db153c4fdbc76aa2a41a8d3e5e1aa197cf8ccd0368217b86ef782d902000000000000009abdccb72ff8adfd7bce31ac94b0ffa29ab9a8033a3a0e5435fabc56a1915b9d2c72cda77c8df8be276cd8815b65a2b6ce0f8b135ec75e3dd3c6774a1a0efd7d3198d1cca9eb3a7127716776da969c26ad0e6dfaf04a04ce8627f60bc9a0ec334df7d1bf018a5d68771ebd68a3d1338d8a48b286c30b48e4ea8c306479ca253e8c2fc5054d5929c18c47231e0bee884cd9766b094adc934fcfcdcbedf3900"/235, 0xeb)
sendfile(r1, r2, 0x0, 0x1c500)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1, 0xff, 0x44d9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r7)
splice(r6, 0x0, r7, 0x0, 0x10000, 0x0)
close(0xffffffffffffffff)
splice(r4, 0x0, r5, 0x0, 0x10000, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0x4000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf0e)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  584.373241][T14138] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.381721][T14138] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  584.394749][T14138] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.402999][T14138] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:44 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x27000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:44 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:44 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8a01}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  584.417070][T14147] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  584.434842][T14149] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  584.459569][T14161] loop4: detected capacity change from 0 to 264192
06:11:44 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x0, 0xd9f, 0x80000)

06:11:44 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  584.510563][T14168] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  584.528288][T14160] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  584.563184][T14154] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.571607][T14154] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  584.584080][T14154] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.592427][T14154] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  584.650722][T14154] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.659054][T14154] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  584.672261][T14183] loop4: detected capacity change from 0 to 264192
[  584.679370][T14154] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.687766][T14154] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:45 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x600}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:45 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3c010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  584.702493][T14171] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  584.717342][T14172] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:45 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:45 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb401}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  584.795866][T14191] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  584.841187][T14176] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.849571][T14176] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  584.861762][T14176] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.870058][T14176] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  584.930902][T14176] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.939225][T14176] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  584.951787][T14176] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  584.960167][T14176] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  584.974836][T14197] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  584.999517][T14199] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  585.019404][T14202] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
06:11:45 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x700}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  585.027706][T14202] ref_ctr increment failed for inode: 0x361d offset: 0xb401 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:45 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x11}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:45 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x40000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  585.079470][T14203] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  585.131823][T14193] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.140247][T14193] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  585.153007][T14193] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.161351][T14193] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  585.225689][T14193] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.234900][T14193] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  585.248785][T14193] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.257310][T14193] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:45 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xefff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  585.273394][T14205] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  585.314163][T14211] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:45 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x88d}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  585.332676][T14213] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  585.367426][T14193] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.376076][T14193] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  585.388478][T14193] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.396769][T14193] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:45 executing program 4:
r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
sendfile(r1, r0, &(0x7f0000000040)=0x3f, 0x3)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r1, r2, 0x0, 0x1c500)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  585.460658][T14193] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.469184][T14193] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  585.482221][T14193] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.490525][T14193] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:45 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  585.518345][T14215] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  585.526794][T14215] ref_ctr increment failed for inode: 0x361d offset: 0xefff ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:46 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x12}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:46 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x48000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  585.566589][T14216] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  585.573550][T14229] loop4: detected capacity change from 0 to 264192
[  585.586525][T14219] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:46 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xff01}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:46 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x27}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  585.644588][T14238] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:46 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x900}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  585.734952][T14224] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.743308][T14224] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  585.755263][T14224] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.763627][T14224] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  585.834670][T14224] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.843059][T14224] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  585.859156][T14224] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  585.867457][T14224] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  585.882812][T14243] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  585.900518][T14246] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  585.909051][T14246] ref_ctr increment failed for inode: 0x361d offset: 0xff01 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:46 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:46 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xff07}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  585.955407][T14250] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  585.971477][T14251] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:46 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x4c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  586.045241][T14247] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.053567][T14247] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  586.065821][T14247] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.074109][T14247] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  586.145476][T14247] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.153793][T14247] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  586.169191][T14247] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.177559][T14247] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:46 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xa00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  586.192992][T14253] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  586.238754][T14260] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  586.246965][T14260] ref_ctr increment failed for inode: 0x361d offset: 0xff07 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:46 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  586.280520][T14261] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:46 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x4001)
fdatasync(r3)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r2, 0x0, 0x1c500)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendto$unix(r4, &(0x7f0000000040)="26af", 0x2, 0x4000000, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})

[  586.325245][T14256] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.333543][T14256] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  586.345985][T14256] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.354326][T14256] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  586.420210][T14256] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.428989][T14256] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  586.441042][T14256] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.449332][T14256] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:46 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xffef}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  586.473181][T14263] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  586.492292][T14275] loop4: detected capacity change from 0 to 264192
[  586.503109][T14265] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:47 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x60000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:47 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x68}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  586.577357][T14277] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:47 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xb00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  586.632239][T14282] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  586.640489][T14282] ref_ctr increment failed for inode: 0x361d offset: 0xffef ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  586.725220][T14268] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.733670][T14268] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  586.745403][T14268] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.753660][T14268] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  586.811050][T14268] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.819382][T14268] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  586.831025][T14268] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.839327][T14268] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:47 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x100000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:47 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x68000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  586.853638][T14285] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  586.879461][T14291] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  586.897414][T14293] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  586.946679][T14268] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.954986][T14268] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  586.967592][T14268] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  586.975929][T14268] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  587.038571][T14268] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  587.046917][T14268] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  587.059379][T14268] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  587.067859][T14268] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:47 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:47 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xc00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:47 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  587.083730][T14294] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  587.121095][T14298] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  587.129343][T14298] ref_ctr increment failed for inode: 0x361d offset: 0x100000 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  587.184035][T14299] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  587.211971][T14306] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:47 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x6c000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:47 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1007fb}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  587.235863][T14311] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  587.245321][T14311] ref_ctr increment failed for inode: 0x361d offset: 0x100000 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  587.261357][T14310] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  587.305844][T14300] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  587.314236][T14300] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  587.342515][T14300] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
06:11:47 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="040005090000000066617400603b7e000200022f73d3e9", 0x17}], 0x2000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0xb0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x0)
sendfile(r0, r2, 0x0, 0x1c500)
fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000300)=0x9, 0x81)
r4 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000a00)={<r6=>0x0, ""/256, <r7=>0x0, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000042dc0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x3, "effdfbfac8aecb"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000400)=ANY=[@ANYRES64=r7, @ANYBLOB="fe0100000800000007000000000080ffff0000000000000007000000000000000500000000000000000000800000000003000000887f000002000000ff000000faffffffffffffff090001040000000009000000000000000400"/116])
mmap(&(0x7f0000505000/0x3000)=nil, 0x3000, 0x180000b, 0x4000010, r0, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

[  587.351362][T14300] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  587.433373][T14300] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  587.441894][T14300] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  587.443529][T14322] loop4: detected capacity change from 0 to 264192
[  587.455142][T14300] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  587.468100][T14300] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:47 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:47 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xd00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  587.486386][T14313] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  587.508330][T14321] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  587.516648][T14321] ref_ctr increment failed for inode: 0x361d offset: 0x1007fb ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
06:11:47 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
creat(&(0x7f0000000040)='./file1\x00', 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:47 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x68}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  587.549418][T14324] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  587.588374][T14334] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:48 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1b3ae8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:48 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x74000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  587.610467][T14343] loop4: detected capacity change from 0 to 264192
[  587.619364][T14335] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: 1
[  587.627604][T14335] ref_ctr increment failed for inode: 0x361d offset: 0x1007fb ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  587.642310][T14336] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  587.696506][T14327] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  587.705049][T14327] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  587.718307][T14327] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  587.726763][T14327] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  587.793298][T14327] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  587.801588][T14327] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  587.813503][T14327] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  587.821766][T14327] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:48 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xe00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  587.851202][T14346] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  587.864273][T14354] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  587.902734][T14339] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  587.911042][T14339] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  587.923441][T14339] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  587.931880][T14339] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  587.994984][T14339] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.003566][T14339] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  588.017929][T14339] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.026218][T14339] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:48 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:48 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x200000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:48 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x6c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:48 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7a000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  588.052811][T14357] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  588.070602][T14359] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:48 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x400001}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:48 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  588.121681][T14366] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  588.169648][T14361] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.177979][T14361] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  588.190580][T14361] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.198921][T14361] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  588.286108][T14361] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.294451][T14361] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  588.306751][T14361] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.315174][T14361] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:48 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe0ffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  588.345057][T14373] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  588.356513][T14377] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  588.374049][T14379] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:48 executing program 4:
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[])
open(&(0x7f0000000100)='./file0\x00', 0x200, 0x0)
chdir(&(0x7f0000000000)='./file1\x00')
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r0, r1, 0x0, 0x1c500)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x20)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0)

06:11:48 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x8cffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  588.414845][T14361] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.423161][T14361] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  588.435909][T14361] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.444224][T14361] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  588.516468][T14361] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.525035][T14361] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  588.536768][T14361] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.545061][T14361] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:49 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:49 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x74}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:49 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x18a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  588.565256][T14381] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  588.576716][T14388] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  588.593151][T14391] loop4: detected capacity change from 0 to 264192
06:11:49 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:49 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xba010000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  588.606896][T14398] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  588.633796][T14404] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:49 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  588.696882][T14409] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  588.737568][T14397] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.745875][T14397] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  588.757998][T14397] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.766300][T14397] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  588.843806][T14397] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.852294][T14397] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  588.864896][T14397] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  588.873328][T14397] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:49 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x274}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  588.892021][T14414] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  588.903761][T14416] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:49 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1004000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:49 executing program 0:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x7a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  588.937820][T14420] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  588.967082][T14423] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:49 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xc0020000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  589.004207][T14421] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  589.012683][T14421] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  589.028064][T14421] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  589.036552][T14421] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  589.109806][T14421] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  589.118213][T14421] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  589.140498][T14421] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  589.149003][T14421] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  589.184206][T14432] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
[  589.226760][T14428] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  589.235183][T14428] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  589.247846][T14428] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  589.256139][T14428] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
[  589.314265][T14428] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  589.322688][T14428] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000400701ad
[  589.341428][T14428] ref_ctr going negative. vaddr: 0x20000008, curr val: -748, delta: -1
[  589.349735][T14428] ref_ctr decrement failed for inode: 0x361d offset: 0x6c00 ref_ctr_offset: 0x8 of mm: 0x00000000d5640515
06:11:49 executing program 5:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:49 executing program 1:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2500}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:49 executing program 2:
set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6c00}, 0x300}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

06:11:49 executing program 3:
set_mempolicy(0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xe83a1b00}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

[  589.364579][T14433] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x8
06:11:49 executing program 4:
r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x2, &(0x7f00000007c0)=[{&(0x7f00000000c0)="04e8040900000000666174000404090a020002740ef801", 0x17}, {&(0x7f0000000840)="ede3dd45cbecc4dbfb3a7652323939396c55b976d2632c29d3b10cdfe06594461357e246084c25b8aff83de19030af1c8ae6a9b6de89f0405f33bceec89a3a4c4274dacde65a9ced3217acd24645bb426c64322ca43c6a148c6ec4de89aae962f5b928c882cfb2d6330b88fe451b4484db001f5f916fe3f0d98db845cfa81cce59be1acd7ee48279a6a153004c8af5cb8b2fd2b490521959ef9f2dc20938ef0ec7dafcbb5b12fc70b9cda0ee63769ebb240044226f46700961b6149d30306d763b", 0xc1, 0x6}], 0x100001, &(0x7f00000004c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0)
r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000600)=[{&(0x7f00000009c0)=""/171, 0xab}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f0000000300), 0xfffffd26}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f00000005c0)=""/36, 0x24}], 0x9, 0xfff, 0x4a)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0)
preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0xdfe, 0x7, 0xee9f, 0x9, 0xa733]}, &(0x7f0000000040)=0x78)
r4 = inotify_init()
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000300)={&(0x7f00000006c0)=""/243, 0xf3, 0x3, 0x9})
write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197", 0x20)
sendfile(r1, r2, 0x0, 0x1c500)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000940)=""/74, 0x4a}], 0x1, 0xd9f, 0x0)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000800))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0)
preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3)