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", 0x1000, 0x1}, {&(0x7f00000009c0)="8228f5e5130c9b0b572831af5c929a4052af6a1cab121de60382d84ede9ba9abeedaedf62b8bcf31085ef21ce669c8a5571e48055a1f16ef89af9ce0021918657b30111f974bc2eadc33fc2324105a1d1a6b178c89e5e8e138de75cd38367f21e50b9f095c35c321264b45004942415acb002f321023a7666e60ec2ca769ec1fd36d27d5e7e0ce9b245536ddf23bfe94df21d0ed1d33c42d5a3e0737759b003a92b07273d2efe88f3e", 0xa9, 0x2}, {&(0x7f0000000a80)="a9ad062630c990c4f8dd143c656a41adc15f5088189e1fc0ebf8b0eef78a2e06ec7cb4776fb3cc02d1a05a2089d040410e657a91e25a8aaf6e839784bb1fb8859b29e032d37a9254678b57a7a14d752f20311e578decf8b70270aed2d0c8521e67d6c8f801d2ad24a77c540f", 0x6c, 0x6}, {&(0x7f0000000b00)="f99978b38f163efb4c496c4f1c70c773ec40a61fd942c1371f846467eec5ba4f8268c08ab4f254759c5d540b2c026242d4a75df2c1", 0x35, 0x5}, {&(0x7f0000000d00)="06d580a2dc09f8a7895cc9906649a4e2a8ba2b89257fd61f62d8fad836d6c7cb45649721039c387c6ecbd510b57793d41a4b3028148d379a76ecffbbae4a2ec2204631a602a9f85d72a7fd9c195021c52efdd38a0e6ab4e257b46de543abc14942b62e9fce7da192a171347b27a300f33f455df997fde1a5cec358d77f60d11f296d939eeb7cb708ac6778f0df044cac52a1dec4db4f07feb37b04f5c898557d6dc3019986fee7c9685d7cde53f4d25356", 0xb1, 0x49}, {&(0x7f0000002240)="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", 0x1000, 0xffffffffffffa61a}], 0x80c10, &(0x7f0000000dc0)=ANY=[@ANYBLOB="262c5d2c7d2d5d2c2f6465762f696e7000002f6776656e7423002c736d61636b66737472616e736d7574653d289a295e2c7569643e5f9163de956ff5444ecc3a0d27bda216b5ad15ac558843ed0f34d3996519564f6b5fdf879021de50e3d4b49a0d165a6eb664a9597f1a3bff499a02fc7ad36f9ad9c6427fac6511a33692a830a3dd7314dc75f39ec48537ac97a35830a1292b2499913385cd113b09f01f6d1764a93973b055964f15988959843c985ca9478a597fff7ce5ce590da75b17903a8c0dec4e1aec23889df464d88b0c4d73", @ANYRESDEC, @ANYBLOB=',mask=^MAY_WRITE,fscontext=system_u,dont_measure,fsuuid=d91fa\x00ab-fc8~-8668-1bce-4c\x007cec3,obj_type=/dev/input/event#\x00,\x00']) fcntl$setsig(r8, 0xa, 0x13) flistxattr(r7, 0x0, 0x0) 00:04:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007021dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1729.820402][T17739] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1729.828918][T17739] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1729.854039][T17758] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone3(&(0x7f0000001200)={0x1900000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x2f}, &(0x7f0000000200)=""/4096, 0x1000, &(0x7f0000000100)=""/21, &(0x7f0000000140)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) fcntl$lock(r0, 0x6, &(0x7f0000001280)={0x1, 0x4, 0x1, 0x9, r1}) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) [ 1729.862570][T17758] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1729.883448][T17782] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1729.891794][T17783] loop5: detected capacity change from 0 to 147456 [ 1729.911355][T17758] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) [ 1729.919818][T17758] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1729.952043][T17758] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007041dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r2, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000000300)}, 0x48044) sendfile(r0, r1, &(0x7f0000001d00)=0x67, 0x8) sendmsg(r0, &(0x7f0000001d40)={&(0x7f00000002c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001e80)="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", 0x1000}], 0x1, &(0x7f0000002e80)=[{0x1010, 0x105, 0x6, "bc1f0e7bc2a743389cb9c889060b55efeb7712e42983f2695cef885ac30ad9b5e1266aed9d91879cdf2951898f9d31aaf02d5a5fa3ed1d4fd3c32c94af906aaa85ef0bcc6dac84a5ffdc6e4951aab625dd070bcb2b3fc1a4b541cc60c8dd178b0ebb49cc8ad8ab83b8db1111ad8dccf132f1a0d6d98d7cf7169c1ed53b236b60eb04d5d95e9a2b6d6808b2c213a8d8d0db9efea2a983d993e820986df34e96f3e4a6462addefa67de73f57fcdd4c34f79268d5f37986bf29cf93965d6fcec9af44245c2fbda21be96f10d3dda0d1e29713c0721af42075026424594c831a26480e82117c8a4ddb99ab06aecc9503751072e714030f429e4b2f720ff7783327a9558fe523351f0071f4cd660d38f6c6119d7e133ce15040f2ab51933ec578740c2f005c4822b063861ecccce9548df674575359e7ef99a3c2c29deaca1a5dea671da42f26fcb1ba3ad54d3c776aa3e063a124dc32ed83d19343378614b27c14385811a39656e8260b73b9855b2e4c3a6e52593bcb432c1ae2f05d894b9880d116307d06af0909765e513cccce41239452450994b784bdab678276bd73c5569a86697b050dfb58da44fc8b704355a1a0216a55d79c0c1fce4d7449c0f34892c942c62c35606c7b4df8ed86e2f98bacd2ad61b8e49c4fc5d9f4c18b5586d15b781b10404bc746d3ee9503a2c43ab02aafcba2841b7124ac8b5094f8d3749f6075f07c66257bd56374ab3d8d9591f3b826e1c6bc4aebe2fa59392e5f414639d14e2b216bd7cef0c5596697baa746ed08a3d98889124d87b314333f1ae5f1024e7b16827b8858e1f6ae68651768cdbf1064ffe69039aeeff7092ea4c08cff91b5329c83b09f9ed930bc6e4d0cc18d20086bffaf6bf5cc1a495283fbfb14496508021c94bc47d85ccac9fa0b41e619e8ca2ac2438addaa9c27594a217dd07c5fabcd194251d601640863aa44f1bf0f1e7c7c778e7447304cbdfc9086c9ec38216c2dafdcb4226175b8a38629855b6e801584fc3366020eede97363940b5c1d1df60dbeb2369242367b3341fc744d692faa2b54b90ee2f54b1f67d6b59c10b789461e9472e8aff860cb2a7290ecf5b0c1d457075851599e01958d443ed3ea0560bd676b0622eb078dfde4c949023de1181b6862eb9486ccee66c8bd8af1062b611450b15c9a069d9b624dc03aede77af4785eeefe977e979a7f41ddda740fe001e7bab98fcbb36fcdf068fefb0acdc5f558c6cf1b96ec80ef1a2367bfe04a870594149bff0cb3187d7ecf704fc8e568d75b7c5a6feea43772008d8b98f60b0177d331486673b0da5c57622e985ef53a1f3f0e6f3d1e83c385359ca6e2ca05728b32b4d488320b9d1972c870490b241b855cda7f09187f658d909b94e3b2d0f3ee522bb47a3a160c186447c49f60da9d40b14952c846ee1600e1e2b5b8bae713c0ca3195d0bf1bdd4d2564646226df65592a6889ea4985bc182f199ebc50df3d428b161e338db2c61a4e8d7aca21cd76b2336bc924ebbf3bcd67f2a5549f880f3d913778a2375bcc9fdcfbcb604e2bb65510e0f235770b2b4a26b2e1b80d6287db6968da55231354fb0f2a7e6a7006029927c98076d9b69569262a965d3c5106964383e73bf264dc464880bb226627388fa86d9c24125a3bcb91b20f8a34b9e7b75372ffd5f747852d2068f2a200c4cb12dbd217d8a021a0d1658506ef245d86f051dc921fddbd5df441a4eab3a358257af73264407efe25e76bf5c46b5e54892387786f3c50f1dc30568aa7d5caccb9bd19146f3f57e5b33371ae694270dc39480dcb8ba49f48521f638c26a677c905903c42bf0a17f0689a4ab6ea2d4e5e01d186d9453d0cabfa74bcb5422317be6053c6874a84369ca0af8db22285273eeb6dbff11dffb62df5b600a8ef19a209b8b969e6f087842ca6eb07b3b0687006b5fd73a552dae5706cf6749842cdaebd235b3371c12caec214ea88536952557567c00193cfa261e044934def74999b1d6a22ffa56f7cc1bf53420e060bac2991884cdf59c9362bb0f59d1951ecfd72afad6015417097548ee1056efe4267b1e1c5b2cc9462e28c0fef9139638110bcea52deb621f7280b5dac7718a963cbfd2a5dba8e923271f3967ca4b6db458c51c72be4a0e2e75de08763dcbde2229ee1cc438cee617ae2f032410b95a047c737aafc79577c09aa2763ce88bb0a6ef1acea55384411cbf215b509da63bafff5526ae35dac06e25dbd71398a105099f5f40badb27f7b01859b42b504f751528260c47e9db611ba64eecd2ed799b660aa01b6c982ebfeb6afa3617acc506b16d747d560df66fc909c60a1899b10135593adec00ae7151a44fde75dd6378021e8a1fcb279a2bcab7bb629dadac86f3441421aa5bfb597747a7d78d5e303dd9665ad8e0e6992cd28f414156fa1b50fa0afa5ff98b16c9f09694aaa989f130ed69b36eb47bec7c4c0a3b99227916bcd0c1bd61c38095629e5cea8de7a4f4f8d3cbcaf235ba06272bb744cb2f620d56c6667a45397e7e57a0b8dfa465b58344af842362adde1e5f063a1b049104a6919c8f6c24bd9b4d56e99ce66784580f2ca6bd124ad2644c6ba95149f03b9c74d027265e4adb8d6bd51b42334f9aa19015b72663c1adc8c6c6eebb596a4e7627b36093c25f9a0d8c6841b659ac40ec9264c05dd874074606c4ab09cea00bfcc4823a99653549a7e6b9ab3a9d475a16455052366c520d3fc736bcd6dbec7e256a169a8845c90a38e68c48ca6ee95853ae55750de61dda64c4e14affcbd37e7966e4ee42d6618edd5a3f7fad75b1ae4c6eb493c8b9b88354be878a1c4557bf9412449a3fbe28d5757c804bef6c1cdeb6c70630695cdbcce57f3bd21a1ea9e12ab2fb0480f45c7b829a60f161e2f4c1cc7b5f42c3d92af39994c0c7380d6e866b2382871736052760abb3c1e8c62af4223e0912ac4c56779c516f4d12a74414fc70b89071ba3da78cf3df9d1a45df6ddf535016b4772576c02e4dbd7922bbb2765f7238550830043ab72741d1ab8cab590cc7fa28cb6d5b14650971ecddbd7ac8a89cd3b10ac2c93f8b188f9d1e83a9e55f7f8230ebcf19a653ed9c09f70e81e52696ea472b78ffbfbe423741711ea1831cbc681ce80a48a7eef847acb83b172fec64b61f0e9ce75c4fc398faa22d4d4bc9d1fac589acc16e4456cf1b0d163a495d810a2775a5b831c60f2cdafaba34230c1463245e8a4f70a04737065109ca8a3cba4a458b0736c73ff7827af1ab0811678c615e58d44315af6cef32a338efdc1d766a3d23d2b5096284565ce2b6f8779b10eb3a85eb8014dcf7bdfc81e9a40ade0fcacf0e0fd60cffefcb389f8fe809f444845a64f0f7adb41e96e1e675427a351ab791fab1a3f517cf059c1d887036bb0ff75cb8b60f2399bd625cd53c9051eaa857664d8908a96a4fa5585362158af44e59e5fbdc2715aa346ad98e59201eb687a5e07bc75c847b6e2fcf5891b011fbdebc4e09d941c586adfd91abbf94c8367d502a7c8217d50f30aea159f927a994acc18e9315e2ed21fbcc669aad2a12cd036b5ffbd353a827ef906c63682d7f9aafb8767982e47f6883e607c679e09f39a69ca8ee68c236fce911a6efa95d78dfb2c73162666bfaa989f64e4d70246ef556ce37c0e7b29d542e1964e351855e91b03e23f5a6277391eda09bb3a24a0abc354fa9635a60fd9428e72a19609f6b100f7827aadaf55647d209e9e180b99a04f8c478b6df72910ea58078d6a742bdda78dd90bbed4a37b5df07120aa4f393b842262d61df16bad65ba62887c95fce5bfc55a4bcc4265918b7614d9c685e854384bf1323a3691af4474fb0b8fb39746fcc3c1d05f1878bd239e8528a0b080f833334c57e0e13f8edc77ea91d5719a19031a51b97d7967dde811c8c5ed4c2cf45675ecb515d556e06b098eaea439389915034562e1479a695c3f9887be44d541684f7e4ef7942a3c2a0c4572667fcfc5ca1c385b33610b12f4396cae107d94add95d2d5cd4ac2bbbd4183997c9bbbee40ef1c58e38155f6f4244a267b1e9be2e09bd7b4c8aed8ee83bec79b56e8c5571e1f5aae33b2ca0044cc2f3934e3eadc265b55042ee1a2344dca4cfb95ea92212765571d4df9f421fefdd824b1c5845f3344b5006370f7adbc0c3beac9021c8ea4a47dab19e2f4f3b2945828112bd43edd26cc64b393d12549e3f001dc847153c9c7df23041b511e398b293625fb756e8e265d36cea9e79f5ad8d505dbfa41c31e7b8fec7b8d31adb64f2454e6ada8034ae897f3a4a08001cc84d970ef735fb61d9e4d5aa8787300a3718926440a6249113730af1d8b99f515c593511a2cf54932d2d300bd303ec951c0317017bb30337aaccb3f08cb0b20e2dde4efc409b16df79e2466ebb037e3b68aa71e46a6ad89f2ab4e172b36297ce68490ad8ea89e359298125136ad2d407169c68e143687fefebbc84817f6e9c7ea56731fe3925cca8eed8cb76a9adc4bbd44189a6bba598778f59d1704ff9749501762bc76372416107267aaa68ae4889b5ca8ef8c140dd8c3f44de00679df881b99be7188b197e54e564d773fa8e919f852cdd182961f754b8e40960277ad5fc4ba0400de67b850e66bb7192419e09d7f61ebe0aace8efa0545a8f1cb914707085d78ac1e457c04009f8c54b7cbf998b92dd276d84ef9a23bddb270fe12936848f22142217d7ed1164d5536a1a5166c2efd181d5d223c797c6698510ed0292c91cf694ec7305cc06420c863179f48eaa2ff6a43c486d8f6d5566a75c3401e3e944e749162d92f3fd926027d2ca4ddbf40e00d0c91dcfdb4ba897c01ca7951f0e035c1ecf51033e4a0c1417c7e27a8180b80205426bddc395f61c35a012d55998d41dd953526a89977944d809859f68b6d9a3ededa111904b1e82630587f78684763f8fed7526b2bf81ea28193d17a24554ad3f355738dbd40a35b7c58e1dc37e3454d63bc14b846dba3ab8d90f799ab5d9cdeb5c562c7ec949b6c1a891bc79ca9bb4bb4e3c65d329e83f0c1d4bf85f99b60858ad8f2845a2acc033fe889f1427ca92faffa4aa1c26a1b00b68c5030cdf37129473d97ec0cf8738423df884571440403f3189ee55bf40c5313df3f7ddf7cb5234ffc6f33a6a8fc136d0397a0146f7c6f59b6233df69522b113ee3640c2af1e75b99cc422417609d51f08c59af385d432273887252f878d893a310942a2b112a5d8a72643ad906c0149478a478af6f070e45dd72bd4d883c7af0b39110c233560233be3af9a45c6ac79b7c2d6dd10fe47cd877947ac9dc4395ddd86bfe9d20df10c355f5069e7c166b9787c98647ac86ab685b13d1cabcc5bc617342d9a7cfcdfb91d159c303c78baaf8d2740e9c2c05955ecea79d75efc4613a46ea463f952aad8c9f09f2126ec63f73bb448a0935ad10e3b6fd7d2b0784442e8d1a2e9954a7bb1451ac0ed51aab1032e39aff487f77107aff6e7d378af8ca83dc025c4d32fe4aec2a698eba09dfe1fa52747853df4614295797434463450cb38fd30594241f248a7afc678d34893af25829f88b4d16197371a96398ecb4076c51f31c8f19df28f4a7400a2961fdf980a5a36d3721a606d0803e6a8cd59cf19e98f74e9896033346a36ce002a43f98aef2a78a65b98c7c2fd6b2289c04743d81e958217bd1d0ad9aa842d01351ac604d72f779f1f93f9e71d6843f02b293de5e12095a4e49a1d907462ea9c7d6f275df46dcebadc599115e0c6ae13c589f8530984b2ad84019e336706ee2bbf852c9f921dd6ebc6f15082"}, {0xc8, 0x10a, 0x4, "d89eeb674e2681c92d17750cf49c24c509862ee3ad37c5fe609b90fc3841fbc7e40d9066ad376a76e37c6fe4c916c3055dcf801fe4c87420d9376e915fd3de2a21e3e6c27f3a3419d39e004a7338542940ac0271f0ed9249723094d4ff1f00554f92fade189f2e24278ead12ef20ff0a9076ccf5910a2d2fcff5afe932bed8883ab289956a5ddd3caa8ea4e0c6d3b08aa4e466f9baea58a72d6323dc56e8c130ec27c4d052638720ac999396674c9db88807ebef45"}, {0xe8, 0x1, 0x10001, "28b1c56ca00d6116d45c2d73846f28ab8b94547f7b689f36c320441e32960579f2f03d7dcdf89061f4d97103b016e061c3accbce26acaeb38beff9e20a255107a8f8b8fe86e27b9e045aa682e673601a5267551ed3d8bee5d9e4d0d30bd1515f85830e9ccb4c612f9c134bacc6693bb0a7cdeabb9a21e34e4279b5f76e84686856212af7adb814410023d2889a8727cbb53eb7d1baa90ceb8416448d5c0af713d5f77e2336075237c3db45d72d58af4ad68a6ce6c89616f79f3e3aba2de025cf64a5b1a353b1c61b7093ae08d7e61f0e77"}], 0x11c0}, 0x84) recvmmsg(r1, &(0x7f0000001c00)=[{{&(0x7f0000000040)=@tipc, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/129, 0x81}, {&(0x7f0000000180)=""/199, 0xde}], 0x2, &(0x7f0000001dc0)=""/192, 0xc0}, 0xfffffffa}, {{&(0x7f0000000380)=@in6, 0x80, &(0x7f0000001980)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/195, 0xc3}, {&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/38, 0x26}, {&(0x7f0000001640)=""/234, 0xea}, {&(0x7f0000001740)=""/90, 0x5a}, {&(0x7f00000017c0)=""/165, 0xa5}, {&(0x7f0000001880)=""/247, 0xf7}], 0x8, &(0x7f0000001a00)=""/22, 0x16}, 0x1}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/48, 0x30}, {&(0x7f0000001a80)=""/21, 0x15}, {&(0x7f0000001ac0)=""/132, 0x84}], 0x3, &(0x7f0000001bc0)=""/35, 0x23}, 0x20000}], 0x3, 0x12000, &(0x7f0000001cc0)={0x0, 0x989680}) flistxattr(r2, 0x0, 0x0) 00:04:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0xff, 0x440000) getdents64(r1, &(0x7f0000000080)=""/114, 0x72) flistxattr(r0, 0x0, 0x0) [ 1729.960497][T17758] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007051dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1730.050214][T17758] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1730.058677][T17758] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1730.078398][T17800] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:13 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x10000000) 00:04:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x0) r1 = gettid() tkill(r1, 0x34) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, r1, 0x0, r2, 0x0) chmod(0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x9}, 0x10) r6 = dup2(r5, r5) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r7, 0x4, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) mmap(&(0x7f0000420000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r3, 0x2fed5000) 00:04:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x171de198031fc88b) flistxattr(r0, 0x0, 0x0) 00:04:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007061dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1730.122898][T17809] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1730.145139][T17786] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1730.153638][T17786] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x240540, 0x90) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getpeername(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000140)=0x80) openat(r1, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048000}, 0x40000c0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) [ 1730.190994][T17786] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1730.199509][T17786] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1730.227426][T17822] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone3(&(0x7f0000001200)={0x1900000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x2f}, &(0x7f0000000200)=""/4096, 0x1000, &(0x7f0000000100)=""/21, &(0x7f0000000140)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) fcntl$lock(r0, 0x6, &(0x7f0000001280)={0x1, 0x4, 0x1, 0x9, r1}) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/210, 0xd2}], 0x7, 0x2, 0x8) chmod(0x0, 0x0) 00:04:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007071dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1730.253771][T17811] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1730.262242][T17811] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1730.314705][T17811] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1730.323148][T17811] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1730.351969][T17842] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1730.376497][T17836] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1730.384931][T17836] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1730.410791][T17836] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1730.419245][T17836] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x80010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1d593a65d30c2c6bcf807aa5dd7e8fb761724bd36e575f5343ed4342123274a4f409e32e2c465c14e41235ecc889eab2369f61061acf0e5c0facd48bb7ff7b381b19213c1d49214598f71fe0b6a578aadab0e8a5b6fdb93a9cf1263bf29f1bef266cc92d978b63060805feed85e69236c25b62480c2dc7789f0c3cdf1424", 0x7e}, {&(0x7f00000000c0)="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", 0xfb}, {&(0x7f00000001c0)="316d857ba7673ec4cdf292fd795de21c0cf3ef4e662abcb596acdf95007792cad0549bfe06aab07adb93034ce646f98f9d80d806274c763bb16ab22e0c3a60b61068b008326317b203819900505471", 0x4f}, {&(0x7f0000000240)="0501136cdaf00ea5e48ac4f8d1c5348dbb0c1c7c76d5e79a94167a7a37322cb58b205d898d080fcdbc41ac0ce0cf18042e06b6c89338f73ce685647c4c4d27e3cf2bfaadd82f3c1b907d1f65da5cada546ea400781d4310760ebfe138a9a73dbf8ead0", 0x63}], 0x4, 0x800, 0xc2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000340)={0x1, 0x9}) 00:04:14 executing program 0: r0 = semget$private(0x0, 0x4, 0x180) r1 = semget$private(0x0, 0x0, 0x702) semop(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1) semtimedop(r1, &(0x7f0000000140)=[{0x0, 0x6}, {0x0, 0xa73, 0x1800}], 0x2, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000000040)=""/134) r2 = semget$private(0x0, 0x3, 0x0) r3 = semget$private(0x0, 0x4, 0x0) semop(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1) semtimedop(r3, &(0x7f0000000140)=[{0x0, 0x6}, {0x0, 0xa73, 0x1800}], 0x2, 0x0) semctl$IPC_INFO(r3, 0x2, 0x3, &(0x7f0000000200)=""/99) semtimedop(0x0, &(0x7f0000000340)=[{0x1, 0x8, 0x1000}, {0x3, 0x1, 0x1c00}, {0x0, 0x8001}, {0x79af32e5ce715a8a, 0xfff}], 0x4, &(0x7f0000000380)={0x77359400}) semtimedop(r2, &(0x7f00000001c0)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semtimedop(r2, &(0x7f0000000180)=[{0x4, 0x7, 0x1000}, {0x1, 0x4}, {0x1, 0x9, 0x1000}, {0x0, 0x7, 0x1000}, {0x1, 0x2, 0x1800}, {0x0, 0x3, 0x1800}, {0x4, 0x6, 0x800}, {0x0, 0x7, 0x1000}], 0x8, &(0x7f00000001c0)={0x77359400}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) flistxattr(r4, 0x0, 0x0) semtimedop(r1, &(0x7f0000000280)=[{0x2, 0x80, 0x1000}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000100)) 00:04:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone3(&(0x7f0000001200)={0x1900000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x2f}, &(0x7f0000000200)=""/4096, 0x1000, &(0x7f0000000100)=""/21, &(0x7f0000000140)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) fcntl$lock(r0, 0x6, &(0x7f0000001280)={0x1, 0x4, 0x1, 0x9, r1}) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007081dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:14 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x40000000) 00:04:14 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x440802, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x8f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)}, 0x1) copy_file_range(r1, &(0x7f0000000040)=0x5, r0, &(0x7f0000000080)=0x4, 0x2, 0x0) 00:04:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x9, 0x90, &(0x7f00000000c0)="6df734b0240b2f97729d604f94483e9c8254d98cb638827156d6c8bdef192c40340df9eb0cf3009f8cca7c857d6db2aeafde1a84813f3f9b0246841e4ce576543d38f5bb09b9c566841cc88852f90af35144b88226e1a4a82e409cd6805b1ce433b751085a940cca17a9598ffb039baf0594bd930b5e71a352aa3686df341dc34637bef6017c738b12f438ee9b22d226"}, {0x6, 0x79, &(0x7f0000000200)="9e834ddabc446612727142ca757dbeb41eb4de669385e65f1409499a5a51e296bfded14a68418e0eaac90c144f4ae886148e6d9b63acf543d2e635ab2024ef92c2c318f02f991553f34f0e0d204b083152563cae6b377c88d6f9ae2946523bba63ac586bf7e0a942572bc1dc4c8807259f891594177db716a9"}, {0x4, 0x2, &(0x7f0000000040)="faa7", 0x1}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$MON_IOCQ_URB_LEN(r2, 0x9201) chmod(0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x400200, 0x8) 00:04:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007091dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone3(&(0x7f0000001200)={0x1900000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x2f}, &(0x7f0000000200)=""/4096, 0x1000, &(0x7f0000000100)=""/21, &(0x7f0000000140)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) fcntl$lock(r0, 0x6, &(0x7f0000001280)={0x1, 0x4, 0x1, 0x9, r1}) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) [ 1730.935400][T17859] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1730.955598][T17856] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1730.964052][T17856] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1731.039399][T17856] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.047846][T17856] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1731.068489][T17878] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone3(&(0x7f0000001200)={0x1900000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x2f}, &(0x7f0000000200)=""/4096, 0x1000, &(0x7f0000000100)=""/21, &(0x7f0000000140)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:14 executing program 0: r0 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x200, 0x7f, 0x7, 0x1, 0xffffffff, r0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="240000002600070a1dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1731.090401][T17871] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.098861][T17871] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x3) flistxattr(r0, 0x0, 0x0) [ 1731.150774][T17871] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.159227][T17871] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1731.209656][T17856] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.218168][T17856] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1731.232142][T17895] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1731.237032][T17856] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.248753][T17856] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0xff600000) 00:04:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88280, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x743c1000) flistxattr(r0, 0x0, 0x0) 00:04:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="240000002600070b1dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1731.278303][T17888] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.286860][T17888] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="240000002600070c1dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:15 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x1c, 0x13, 0x4, 0x201, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x8}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000003580)={&(0x7f0000000040), 0x6e, &(0x7f0000003480)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/192, 0xc0}, {&(0x7f0000001180)=""/87, 0x57}, {&(0x7f00000036c0)=""/4102, 0x1006}, {&(0x7f0000002200)=""/56, 0x38}, {&(0x7f0000002240)=""/97, 0x61}, {&(0x7f00000022c0)=""/250, 0xfa}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/183, 0xb7}], 0x9, &(0x7f0000003540)=ANY=[@ANYBLOB="43000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x28}, 0x40000100) flistxattr(r1, 0x0, 0x0) [ 1731.363615][T17888] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.371500][T17910] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1731.372082][T17888] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1731.454062][T17871] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.462540][T17871] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1731.474233][T17918] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1731.525519][T17871] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.534139][T17871] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:15 executing program 1: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000140)) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x101000, 0x91) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x4) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xdc01}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:15 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/97, 0x61}, {&(0x7f0000000140)=""/134, 0x86}], 0x2, 0x3f, 0x7fffffff) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80d0}, 0x6097ca3ac02a5190) flistxattr(r0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000380), 0xfffffffffffffc33, 0x391203) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x95520000) 00:04:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="240000002600070d1dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1731.576881][T17906] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.585385][T17906] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="240000002600070e1dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1731.660659][T17906] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.669207][T17906] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1731.725898][T17927] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.734363][T17927] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007101dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r2, 0xfeb, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r4, 0xfeb, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xcf, 0x6e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000043}, 0x4000014) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r5, 0x0, 0x0) [ 1731.771017][T17927] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.779476][T17927] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1731.835547][T17906] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.844002][T17906] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1731.892168][T17906] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1731.900622][T17906] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:15 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x17181f000) 00:04:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) setreuid(0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xee00, 0x0, r2) recvmsg$unix(r0, &(0x7f0000001e40)={&(0x7f0000000ac0), 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/228, 0xe4}, {&(0x7f0000001c40)=""/102, 0x66}], 0x3, &(0x7f0000001d00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}, 0x12100) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) clone3(&(0x7f0000002100)={0x100008200, &(0x7f0000001e80)=0xffffffffffffffff, &(0x7f0000001ec0), &(0x7f0000001f00), {0x31}, &(0x7f0000001f40)=""/107, 0x6b, &(0x7f0000001fc0)=""/236, &(0x7f00000020c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) sendmmsg$unix(r0, &(0x7f0000002680)=[{{&(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000380)="ce926ed93ed695b912ab991a0f40c319181a35c6107d271d7e224c45585d524de63fc474fbc1ce67304b2ba41955ba72b7b174b6c13c63468dc736bdb48a1651c95a667d2c458123499031e414635f66302bd936d0f3114169e27291bcf375a6a3efd091f1172d6dd30720c30d80d4f403444f79958ee22c860f180e1626f9e0d5a37b9da6e23207c5d8d5894d5a47256aa1d7267d8eba7e7b56aa6d35594c6959e5172cd05353d2e47b", 0xaa}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x50, 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000640)="9bd498d70d15ca0b127e8d8fe63e48f4d6b1c02a8c7b020fce5eb72fb6e8e46a7d7268b3eed9d672110ef088a37174345f670beaa0a0e18ad85a42e8c635c7c5bbc0dd3da20b65632455cdc955fb7efc34f64ff4da20cab0afd24b7338b28ef302081374628254d335e85b735e3eceac7fc83dddd8caa4bd1461452e3aac0c70db9160fff2ddaacf62c70648596c966b3c31fe317f07a09863690c9427190eb0efbba459c8275d1d710e96cc74b833ddb91e3e35ebcdcebf308cb157867a5508b23bcc57f3feed5de6ad7f7298e16b963479906162192edc915f", 0xda}, {&(0x7f0000000740)="b6799988610a8060b75cd69966029d47a1962b63521bf19d1f0c0c54e6f010c32d9b23dfec4e7f46f5c7d48225d25641279e6e86d0708360dcb7d512bf0faa7fe84afce03519743e6a896fce513ed4c0fc3e6b567267545626e7cdc345a935864c4818a711e893a9d5c954ac36017f45f3ba63737177ee68d15060753e9ed4492712d79f7a0c23a6aa3bbf32055ea037989b8a0a5ee4eeb799227b994f2e2a3f250c991b5346af84a5c8a2", 0xab}], 0x2, &(0x7f0000002180)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r0, r6]}}], 0x100, 0x4000004}}, {{&(0x7f0000002280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002300)="7473030a80ef8632457561c6a2f34e64068e04f97d123a95195b0e8fd6ecebe8c3df066b5da250767e5d985b2b65c5cd7c14908ebdba6fd7cd689e0c0fb7ebe76d02eea97fc7db43c3e82b404e331b9f176449fe27e549710e97acd0aa28bcecb193d36c58897ba516807e7913a47ab9348d5896523e289bcecee4255bf8d303bdd44718eb3e816dffaca9b39433b14e2be041d9743f0d7fd7b4058bd2ae9edd2761aa8d428f137e", 0xa8}, {&(0x7f00000023c0)="af47b0df3b274c81e2ca4dcc236ea3df735751b06aa9dfbbf110b1c603f6c547c09cf522b554c37e274ed6e32f66a29e0f7649ae3e32a158e80bfbf636365f4e80", 0x41}, {&(0x7f0000002440)="cafae7e6b74fb6f700a957b0ce6d51b3e3f7e3755fce919468cb92286b9f0d9aea943edf1f982cefddeaa832176b7587522e81aa4e7c8fd8a53567b57862d1586f822ada4254df49cbaae75c87877ce224e3ab4089500547076866efe3c1409d33f29c2974", 0x65}, {&(0x7f00000024c0)="ec55a8fc69a6e23c9a8b69acf793324da10c762026e3b31ffbae84f0db5ff6410a1c2eec7e0ec1cc5136843bbeb7770acfad442e511fdf9895d67f6ed3082827549b1309b6c52c92941e05daec9392aad293c16ef9b1ead22bb8ce32f342e02ba146b87a2edb06e217e529bb02c36973", 0x70}], 0x4, 0x0, 0x0, 0x48001}}, {{&(0x7f0000002580)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000002600)="e0181359ac225f8eaaba1f9d679518fbb86f8b22c38b774ebe357f613e740c820e2a4a438023b08b0a0a9fd158", 0x2d}], 0x1, 0x0, 0x0, 0x24000800}}], 0x4, 0x20000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x5, 0xd7, 0x3f, 0x7, 0x0, 0x6, 0x20100, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x668e, 0x40000}, 0x1000, 0x4, 0x80, 0x6, 0xff, 0x6, 0x81, 0x0, 0xa7d, 0x0, 0x902}, r7, 0xffffffffffffffff, r8, 0x8) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800100, 0x1) 00:04:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007111dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x20, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x102, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0xe00, 0xdd44, 0x7, 0x8, 0x9, 0x5, 0x0, 0x0, 0x5, 0x0, 0x3000}, r0, 0x0, r0, 0x2) copy_file_range(r1, &(0x7f0000000040)=0x101, r2, &(0x7f0000000140)=0x9, 0x100000001, 0x0) 00:04:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) 00:04:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007121dfffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:15 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) process_madvise(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="507688b8fef887adb41e0d480b37a136a538be0cff9bc1775ae911a7f5a7aa639a4ab5", 0x23}, {&(0x7f00000000c0)="9f5cf54742298f622a09cdc867fc1b06f613cf9be2dbb5ef4e7eaf6dc067b58a18e4d48f4966c712f979264fd8374c503d080bc70597c528ed9be36bea3cc65357e9e0cca9f8670301d2dc03b86a3f9118226ed683bf8c3b8b7dbd864121c5318ed355c017a43dc00d40ec0541a342", 0x6f}, {&(0x7f0000000140)="5ac9bc88b3652f2a42f2a5723dbb113948", 0x11}], 0x3, 0xc, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}, 0x2f}], [], 0x4e}) chmod(0x0, 0x0) [ 1732.029455][T17954] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.038048][T17954] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:15 executing program 0: flistxattr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000004c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x110, r0, 0xeb3fd000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x800) fdatasync(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open(&(0x7f00000000c0)='./file0\x00', 0xd2001, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = accept4$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x65}) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="55e338d52fb894a2d17db9a892a3797d51e23c55b66762ee4df52dbe49f85d7f50a30ae723a980ca0c529d13abc8ca8b647433c60b72a6e80f8a720197a9b90401296ec2f01c9bd167ccd95f192062b630fe7ba135441093f070b5c613a869ae604402f9c884f597b28e272048b375a5f57f5b7393c1362fc4c528b2d428afe03bebfbe57350f66ddf3550e0ae0af1e0796d537aa76920e76bef5cb8fa64"}, {&(0x7f00000001c0)="f9727e1bdee329c2e117690f68ae85ed9b6cb4c517dd02fce5a6dcde111f29bd46fa3fe0b624dae08df7fa0e16230e8d0bf2aa0d9f7a84b05cb779e4b6b921aef2e28894b5cb1870730a86a8e2ff08966011cfdc57674955ee64a5665393923867500c013fd8fb57f631e75f1d80ad11d64c90ccba4c08a3ffe0865269e2e8db59d00860bdb0b3b385b995b5e8ebf798aef0a857c1b8f6ff33b4d3f5bba380272a052a182b3d7706bd735eecb8962ff1640dc1ec3b"}, {&(0x7f0000000280)="22282026e2c8e46de8689ba5ad3080a0727e9a1a7a46061e3159205cf8b52daac91440b69b3c3d73e1d5fc182b6287e3ca8d3041f4298be9710ebf5a8099bc86bffa34a1c8f0bc2d2b27c5076ff6139403a31f05c16195e79ebc54777ed31dec4e80768f8b827d884574bec68ebccb8a76c3c1a26829c1322b8d110ad64078ea81ec64fde2157c49136792fea7841a0c50e20916a167e782f317eec1188451adc41594d817698c8602fc493ff254c4ac73fee7618c817d5a29251425bda621a20a8f12"}, {&(0x7f0000000100)="76f760ca86d0f79ccbad4fc8423c"}], 0x1}, 0x801) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x3, 0x99, 0x1, 0xfffffffffffffffd}) [ 1732.091009][T17954] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.099455][T17954] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007030afffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1732.154658][T17954] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.163151][T17954] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1732.215237][T17954] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.223714][T17954] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1732.250036][T17990] tmpfs: Bad value for 'mpol' 00:04:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x400000000000) 00:04:16 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x410541, 0x0) flistxattr(r0, 0x0, 0x0) 00:04:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="240000002600070364fffd946fa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1732.266036][T17977] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.274487][T17977] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd940aa283000400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:16 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) [ 1732.316667][T17977] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.325181][T17977] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283430000190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x30300, 0x0) signalfd4(r1, &(0x7f0000000080)={[0x8000]}, 0x8, 0x100800) memfd_create(&(0x7f00000000c0)=')/(]\x00', 0x7) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/209, 0xd1}, {&(0x7f0000001240)=""/79, 0x4f}, {&(0x7f00000012c0)=""/20, 0x14}], 0x4, 0x1ff, 0x89) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x140, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) flistxattr(r2, 0x0, 0x131364fb) [ 1732.380148][T17997] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.388605][T17997] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1732.422063][T18011] tmpfs: Bad value for 'mpol' [ 1732.441360][T17997] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.449843][T17997] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1732.478873][T18024] __nla_validate_parse: 5 callbacks suppressed [ 1732.478887][T18024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1732.478960][T17977] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.502868][T17977] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FIOCLEX(r1, 0x5451) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r0, r2, &(0x7f0000000100)=0xffff, 0x20) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mkdirat(r3, &(0x7f00000000c0)='./file1\x00', 0xf2) openat(r2, &(0x7f0000000040)='./file0\x00', 0x48440, 0xace4537387009e03) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) chmod(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r4, 0xf505, 0x0) 00:04:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2835c0000190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:16 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x2, r2}) open(&(0x7f0000000040)='./file0\x00', 0x640083, 0xa0) [ 1732.533476][T17977] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.541940][T17977] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x540000000000) [ 1732.619773][T18032] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1732.642686][T18027] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.651194][T18027] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:16 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000300190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1732.668922][T18039] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1732.675132][T18027] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.686639][T18027] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:16 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x8010, r0, 0xec604000) chmod(0x0, 0x0) [ 1732.715405][T18035] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.723848][T18035] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1732.725333][T18039] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 00:04:16 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) [ 1732.778300][T18035] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.786759][T18035] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1732.808338][T18054] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283020400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x533, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001f7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x1, 0x84, 0x4}, 0x18) r6 = syz_io_uring_setup(0x533, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001f7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = syz_io_uring_setup(0x533, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001f7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r12, r13, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r15, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x104, &(0x7f0000000280), 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) r16 = syz_io_uring_complete(r7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000040)="abdc02c3e2543454546298d843c45c6fdb239cfa305510342726d33d80c0f4754c74e159b6d91607076478829a69df11c3f81aca870fc6e3a701e57dd1592f83c988b0a89547a9b4698a96ea7b1d85f8aa7388aa0f9765fc1cd8488b3126de0f4c186d567315cf222c838dfdd48407c664a7114b840472b12e655d555fe0d43dc26792720d2e7f762d62c3d5ef6270477665eff2cc2e3781ead43943d85e3214608b3201e0e9cd546d7faf7585", 0xad, r16}, 0x68) [ 1732.831922][T18035] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.840391][T18035] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:16 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) [ 1732.910163][T18035] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.918649][T18035] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283030400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x115000, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8e81, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '&.:}!0#*$]%+'}, {0x20, '-)-$'}, {}, {0x20, ',+*'}, {0x20, 'c'}, {}, {0x20, '$l%:^!.:@}*--/'}, {0x20, '/'}, {0x20, '&@-#@^@}'}, {0x20, '-'}], 0xa, "08fe145015122ab3b75b069faa5f5663b8753183bc7c43881fdcd2e00f82278359857e966b805459b8697a97da864474be8336c3b30a0f4e4affdaecf87b117e309b00d8adf1e6a52d5af88428deae15f9cd309bee619463c516f77fada6d493351da215fbc5a3fde23ba61dde41ff0d138d72a31cccc604731a374a019e48e7b4a21368f4af5d153a8fb819cf8817ea0dfde3dc72d2404f9aba63c11d75da06fc24e1e1485ae47347ac1a41905cf81dd564e58269a3149d8b1220e9fc397b42835f4133fd9fc9"}, 0x108) 00:04:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x60ffffffffff) [ 1732.954627][T18052] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1732.963117][T18052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1733.011806][T18052] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.020285][T18052] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:16 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) [ 1733.053307][T18076] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.061761][T18076] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283040400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:16 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x91) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000080)=0x5) syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x503000) 00:04:16 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) [ 1733.128480][T18076] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.136956][T18076] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x7fffffffe000) 00:04:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283050400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/255, 0xff, 0xffffffff, 0x7}) 00:04:17 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/190, 0xbe) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xf5, 0x80, 0xb7, 0x1f, 0x0, 0x3ff, 0x40000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x625c, 0x2, 0x81, 0x8, 0x3, 0x3ff, 0x8, 0x0, 0x8001, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x164d6ed0bb111313) 00:04:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283060400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1733.296914][T18105] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.305400][T18105] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:17 executing program 0: socket$nl_sock_diag(0x10, 0x3, 0x4) flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:04:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283070400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1733.380696][T18105] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.389250][T18105] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60e980, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000, 0x50, r1, 0xf3aee000) flistxattr(r0, 0x0, 0x0) [ 1733.444379][T18114] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.452869][T18114] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1733.512893][T18114] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.521367][T18114] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1733.567836][T18105] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.576299][T18105] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1733.594909][T18105] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.603361][T18105] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x970000000000) 00:04:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) 00:04:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283080400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:17 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x8, 0x2, 0x0, 0x100, 0x3, "9097294ff7bd159ae0e560d628776c0fb9ce0f", 0x3, 0x100}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 00:04:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x8) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r0, 0x90f4f000) openat(r0, &(0x7f0000000080)='./file0\x00', 0x400000, 0x0) r1 = fork() perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, r1, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283090400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1733.717350][T18150] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.725923][T18150] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1733.745192][T18150] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.753646][T18150] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/82, 0x52}, {&(0x7f00000000c0)=""/204, 0xcc}, {&(0x7f00000001c0)=""/4093, 0xffd}, {&(0x7f00000011c0)=""/119, 0x77}, {&(0x7f0000001240)=""/101, 0x65}], 0x5, 0x7, 0x4) flistxattr(r0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 00:04:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830a0400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) [ 1733.786987][T18161] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.795450][T18161] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830b0400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1733.846777][T18161] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.855244][T18161] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x4, 0x4, @empty}]}, 0x4c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="fd3b9fad274080686af03166796c623a76cea38f7a20ee5d90db04d9826a5103f3523b0afe6d7eb21b974f33682f04d9855951f489fb81e11501edea43bc96a8f84edc2513f7e194e11ab05b732b3965e362e6b6c873ddfef25f23bc9afe5bcaeb714ca6461ef6b14bf8cf", @ANYRES16=0x0, @ANYBLOB="040025bd7000fbdbdf252b00000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e340000000a0001007770616e340000000a0001007770616e340000000c0005000201aaaaaaaaaaaa08000200", @ANYRES32=r7, @ANYBLOB="0c0005000201aaaaaaaaaaaa08000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4011) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xc0) flistxattr(r4, 0x0, 0x0) 00:04:17 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) [ 1733.896624][T18150] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.905083][T18150] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1733.943100][T18150] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1733.951602][T18150] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1733.975436][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 00:04:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x10400000000000) 00:04:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830c0400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x533, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001f7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) r6 = syz_io_uring_setup(0x533, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001f7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x4, 0x2, 0x1}, 0xfffffc01) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r12 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) mmap(&(0x7f000029f000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r12, 0x5e56d000) r13 = syz_open_dev$vcsu(&(0x7f0000000280), 0x8, 0x634503) mmap(&(0x7f000029f000/0x3000)=nil, 0x3000, 0x5, 0x4000010, r13, 0xf290a000) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) preadv(r14, &(0x7f0000000080), 0x1000001a, 0x7fff, 0x0) preadv(r11, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/210, 0xd2}], 0x3, 0x5, 0x42) [ 1733.986720][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 00:04:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830d0400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xac, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x10001, 0x0, 0x0, 0x2, 0x0, 0x5938ba67}, 0x0, 0x0, r0, 0x0) chmod(0x0, 0x0) 00:04:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) [ 1734.066836][T18201] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1734.101617][T18200] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x81) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x80010, r2, 0x9a847000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) close(r3) r4 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x511a, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="c792d16696ff18a808a04f14784ad14391433e12b7f4aeefbc10ef4eaabedd9886f737d2559b35eb334d95eb0d143e786ad5ec7491794ee7bd8cba696abf23e976e857ac3400a4fca71421fdee405e170c155cc15b995e7355c1695571e8d67c02c219c72b558781e7a0b03ced7e5a10e0739ffc9a5fb71e", 0x78}, {&(0x7f00000001c0)="21b33d1800dcb0557d50afdd6d3da6c8a034b3d8b7b27bb3423a7a8bfd4ace209fd654d7b008372f0b568e24e819de0ac2cb010aae9f07ea4b0e0a6652943a1d22b6479c81a0f98b7d1a2dbadf13540a4f08fe27194706979c2027c8c15483a1714598565f73910ded86df19458eeb8f3adde828197c4fad29e04fec0ca9fc4f29e269d4dac22f55b7f171248198e71c79dc026af340657efa4ffda1f04e7a1733f714f2bf", 0xa5, 0x80}, {&(0x7f0000000280)="5f6cddb70db9d3939d1466568846e4db880b2c970e4cd9fd2aee2139170f4ca06fda8be243b8c650e7885914f9170424520b46de7126bee63e431c6103bbe6e31fe3967c6a9aa5a54dece84faf224eb0313583fe3ece7d548cc3f2014ba3e99baf98c61784b05efc37a6914b687c5ac237d5677a5ebcdbfb0e5978390fb3242b94f93de6b742eeb00116cb2565245edef76bb2125dc6f96e92", 0x99, 0x4}], 0x2000440, &(0x7f00000003c0)={[{'/dev/zero\x00'}, {'/dev/zero\x00'}, {'/dev/zero\x00'}, {'/dev/zero\x00'}, {'/dev/zero\x00'}, {'/dev/zero\x00'}, {'##\\['}], [{@uid_eq}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@appraise}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@hash}]}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f00000004c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000480)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x3}, 0x914}], 0x1, 0x40000080, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000bc0)={0x0, @l2tp={0x2, 0x0, @multicast1, 0x2}, @l2tp={0x2, 0x0, @multicast2}, @can, 0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)='wg0\x00', 0x1, 0x7, 0x1ff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f00000010c0)=ANY=[@ANYBLOB="ac010000", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf25170000008c000180140002006261746164765f736c6176655f3000001400020069703667726530000000000000000000080003000500000014000200766574683000000000000000000000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000014000200766c616e3000000000000000000000004c0001800800030001000000140002006d6163767461703000000000000000000800030001000000080003000200000014000200697036746e6c30000000000000000000080003000100000044000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030000000000380001800800030000000000140002007767320000000000000000000000000008000100", @ANYRES16, @ANYBLOB="08000100", @ANYBLOB="6a6be2c27d94c518983588e3c876bf4259ecd7b0496e3878f735bd0e282fa126f905d0ac7081e64c7cdb1340b4dab34a6e0d7497541cecfca30eb4ad8bc27204f22e8fd6d8fc4b97e17906c4d1db364e52718b2d37b76d70864b12aa7ee7797dd87399e93acb2520059e89fa8b09e1562e27df6899d62e431860a2ce8baf7a8fdd7dc054f16804dd3d101b16e3735c8c86b692ef1b871f1f621f903cdfb7757ff855378c7316c6faf8c54fa1554cf575afee4644cc5d978a80c72fb2a381fbccc9cf6721d780d66d27540b21", @ANYBLOB="080003000100000014000180080003000200000008000300010000000c00018008000300030000002400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES16, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="561714223d9a19847d637d38f8fbfaac60ffddad7f03c0f47c4eda6872ebc803a7fdedb8375cff39ec2d69ba3cd8c03ec3415af7070202c1d84ca4ede4b1fcb5"], 0x1ac}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000041) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000540)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000740)=@newsa={0x9, 0x10, 0x400, 0x70bd27, 0x25dfdbfe, {{@in6=@local, @in=@private=0xa010100, 0x4e21, 0x2c2e, 0x4e22, 0x2e, 0xa, 0x0, 0x60, 0x3a, r6, r7}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x32}, @in=@multicast2, {0x800, 0xbde, 0xfffffffffffffffb, 0x2, 0x2, 0x1f, 0x74, 0xfff}, {0x7, 0x8, 0x4}, {0x1, 0x120, 0x7}, 0x70bd27, 0x0, 0x2, 0x3, 0x3f, 0x4}, [@extra_flags={0x8, 0x18, 0xff}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @tfcpad={0x8, 0x16, 0x7fffffff}, @algo_auth_trunc={0xc1, 0x14, {{'cmac-aes-ce\x00'}, 0x3a8, 0x40, "b033513876f4d5010bd9cc9e43f232c1787b218b342adc8e8f27237dc7aa3dfbf103b78cac5854c78628faa579eaffff08beed275bcc68b5c506bb9a63e5d9099187e8ee72c64fb065619538f70d30e03f892c38eb6bdc52dae469664e64523f1baac1c439918e126a5ac702049148882e624b19c2"}}, @mark={0xc, 0x15, {0x35075c, 0x1ff}}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x2, 0x5, 0x81}}, @algo_aead={0x65, 0x12, {{'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0xc8, 0x0, "93590789795fca01519cdab4fe094ca9cb742f4a024b34c5a0"}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000040}, 0x200080c0) flistxattr(r1, 0x0, 0x0) 00:04:17 executing program 1: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0x1, 0x70bd2c, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x39}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000090}, 0x48844) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9da, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x4000) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x460300, 0x0) flistxattr(r1, 0x0, 0x0) ioctl$int_out(r0, 0x4, &(0x7f0000000100)) open(&(0x7f0000000080)='./file1\x00', 0x24000, 0x100) [ 1734.110103][T18200] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1734.122583][T18201] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 00:04:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830e0400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x8, 0x2) [ 1734.168113][T18200] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.176653][T18200] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283100400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1734.231578][T18232] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1734.239669][T18200] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.241315][T18232] loop5: detected capacity change from 0 to 40 [ 1734.249502][T18200] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1734.276823][T18232] nfs: Unknown parameter '/dev/zero' [ 1734.279773][T18200] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.290642][T18200] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1734.314625][T18235] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0xc04a0100000000) 00:04:18 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x8) sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="85f32d43dff04e93c354208ebd68a81ff43fffc8665dd843f6697769a14e497ebe4b224e00f300fb536e406f857a05b6c4fa7064143a8b79eb472c1a0b9a3bf50a314197f7776cd65f795276520ada8b79d9cea520d974b71cd6ecca9c7e159d7d6b9e0ee7f7aa9ee61882bb65221f12634c5ed484589c2c6c88d448ee740ffcde3022b2cfc16cf9237c1a78d767999b6236943e34edcf90987d6609e1a6ae4d4aeb111e672f5c15a293d7b08b1dcd3d30a41e35b4bf66792ed8723e86ec9e00dd23", 0xc2}, {&(0x7f0000000180)="4725eb286106bdca0c8297a39479dd618629ec394dc2e0f03306e4b57ab8463c46b86b2d0fa784961ef1ad88ee8b4aa5a07dc10b420ac620386149b507221e767299df20494e37ac09ed5557f30146696a6d1e7252f78dee2d103d3ca485b7e667a8a1168e15cfae5453b3a1414f870bfaa314e9de9319440640beb6ad9f684c3570c35c752bc51837a5d97842fd2c0d76fdf6f5de82467e28", 0x99}, {&(0x7f0000000240)="ad55870bd2c465cba99628d8ef912b6f18137d176b5ceb9350a6d809677bb2d11b35dc5ac73e88b8dd7b6b24e55e942ac222e96c04d865cf0e8fce5882d172b4a15945faaa2e0b7c9d7056f34e578fc116d8b29a3ad4e277fc7e1eff1873b24d1150", 0xfe87}, {&(0x7f0000000440)="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", 0xf2}], 0x4, 0x0, 0x0, 0x28880}, 0x8004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x802, 0x141) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$unix(r2, &(0x7f0000000980)={&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000340)="399fccff07877b1d366fd01fcf86e7ba40c52b93e3cfc43523421be1946bd128f016194e4dd0dd429682a99a5a5ebc17adfed5f947a4f7ba4d531bb7fe52feebe6f69201a93b59696eaf4a00a07519981e9fc46ba9c159c77df440744991a1a2797ebe30494443285783c97d68", 0x6d}, {&(0x7f0000000580)="d2d778329b89e90cfa4b6c0dc124615e46eed9094115a895013192cdfb7faecce8ab394aea025fa4d19aca780b24c20d48c97ea97b68193d80", 0x39}, {&(0x7f00000005c0)="526eb414cd135b97c77adf8cc671c4d9c0c01a7c96974e7fc425303d31ea483c480bf2ba829a8b2a3be98ccd4766571081fcaa5c35b72dce32bd42e61d8b03ebf7ccd60a2113efd5433f5a0847562f9327eb6e8c1c9a57c60047ddc093cb83adcdd8f954ea52cbc894c93461aa6ccd5634f7d504f890cee053e0263881938dcb16ecc3d2ee332f112e3312ce6f89beb2fbec2a28920b6e72ae45a395465f74b093f06706bd5a2de30cba1f05787ad931699e296ce5167c73e41053c69a5a234881da37e524063e96b2f7b8fd4ee5a07edaed80f1108e80", 0xd7}, {&(0x7f00000006c0)="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", 0xff}, {&(0x7f00000007c0)="80f77ffbdc97042eefe688c71c53b9f0534aa420e8f30f91ce10845cf477e475d4a077c163653903fc6d9bdfffca6765e2d88e67d8b9744621ab2e73c25dd883d46e810243af9f95766653204aa79b", 0x4f}, {&(0x7f0000000840)="1a16153bf4504773d90537ed48a11e0458f8192565c75f98940c3d05e95ff7d4cb58aac34126f928e38dc138a680fae60bd81be125c6b62d214342a209b7e1c1a078e215d8ab69fecde69b3a13c54f747b67fc9f91e1dc804d2f3a56378ef4a67a3ed08a9f60c079e47be93929eb8b24b69c29ccd6654a09ef752646221a2f7865bba31977f6e8f440089a29", 0x8c}], 0x6, 0x0, 0x0, 0x48080}, 0x4010) flistxattr(r1, 0x0, 0x0) 00:04:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283110400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1734.323089][T18235] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1734.348527][T18232] loop5: detected capacity change from 0 to 40 [ 1734.355531][T18232] nfs: Unknown parameter '/dev/zero' 00:04:18 executing program 5: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) fallocate(r0, 0x5d, 0xc00000000000, 0x1) setxattr$incfs_size(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x8, 0x2) [ 1734.388272][T18235] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.396748][T18235] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:18 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x2) 00:04:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x2d85d8d280f3802, 0x1c0) flistxattr(r1, 0x0, 0x0) 00:04:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000001180)=""/29, 0x1d}, {&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/131, 0x83}], 0x3, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283120400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1734.444102][T18250] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.452577][T18250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283250400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:18 executing program 5: kexec_load(0x10000, 0x6, &(0x7f0000001400)=[{&(0x7f0000000040)="98686fb8f805d03c72f76f6b2cdddc679149064b6eb13556bddc2df2a16e16b0f9088fc4ce52430d0fc9f1ad2cdd90c186a76947979f3643b4503d75eb4f716e39f32bdab0994ad99565290e6af3aae9d19768a5c8a0ff8a5f0b02ec033115d508f03e9182a3a9c294e8ec37259a9981fde61f7d3d7dfd911d6da752193bec9d1d49a38cb99de33db1238327ec62719cb995b32ce60a", 0x96, 0x3, 0x2}, {&(0x7f0000000100)="880d7381a3aeb322e5fa005d5b2244aea623f3c72f21d470001e166cb1fdbf36ac59b078beb48215660c7a05775fcee0db52e00858fb0706d75be5bcda1a0521f6a6330d18c566f57115b7522274fe98e5caf9b5a9ae1a85527bda34c4d5b09d3ca7beabe67db3a3b27f4420fd0f2364acbe90545e34573c4f1f16168750e89ee938f2a12996ccc5b28e166ef901406c8faa490f7ce18ad2d3d1094f0cdf5d396d19feed78b5010508eb7ea14897368f273f10fd8b3b0a450ad94f50594616f5677529b5d00ec464491e1c7f5d399f4e67ba3fe21e7d5dc09d3595029acae383491ae41ef3b6847348ce8c57780c637c9c11ec3a7212b27629b6e40650c1a3156cc341e8ac582c43b131c23ea3aee9304f2d209f9e52eaecf47ba4b3a911f8271492114a85c3355facfe64dd492b7c988cc67ecc62659ecf03d67717b7f5cbda8aa1086350c866a911db88473de24a9bb339041e93ad4d8fe13ff4af71c99866b8f8c5f1f13cebef31a615a151e789b01f9f991914f4af9d253aec62112454f678f6cbb9f80aa224c06e48f22c73080603781b58e02968a8c98eb20fab3f6506c7ad36ad61f2250ee3d9fedc8f0d43ac3be3c63b795c41bc026b3407c1de2f9fffdf3816cdc8ae02b475062d2cc0d75ffbb3e4daeb26cca0923bc08b960d32a8dd2b8991262c8d27b14a6272935b518bec90b28455366ad5b0bebadcc9e74657a876c285844ba718a03721d8b13a923b7e118ce2e736b738469e35f45478b6d96ee0afc34861e6d3d82ba03f4c2a0edf4792d08f4717e1a206fe189fc9e748c63c187f1cb0a017c1532bc3da8854ae618eb788128a69965b3b1b03646ee965d3a926baa8cc47d03289e19c50d1b6773f8aacc0f413c5aceb0d4713c79e111d3609cf1857ce960a16a9a03f64c2e0042f4958fe23b5ff117a80a62b220c3295ffad3785341e461fd9be80e0d584aad84bd0c062df5c7b787889be0ec2b23fab7f54f98eadb92cfff43b478c3116e543dc5d8f33964b2404fe21cb8c8d7d155fc198ee550d71b8ec7e2fa9aab98dd67ac252273b0573b0fe60f8bb996e52f195bea4eb7d2a3a563b72c02e5f037300776d97b9734dc18e91b1f1f0877a1ec72ffab0a7c75cf1ac9b0056631e922df3c71d94aec3ce41a62184096e2e3a0a2fae57fa2cb0c445cc8b2971935690ac2d63e4d72852f22e631740773731139b2c6a1b25d09f346bb6ad488dfe5aa612581ab400c9c559fbb733c4ad2e944561cade8bd29bf646b8482559ea71245cf21aaaa9fc889c7bbd6c660ded21b7f7598dbb8fd151bc4fec1ca8225609ed690457ce4838b15618e16bd60018b22f529e1c10904396b2541b476ba91e9f5f60aa3cefca1fed13a3a169ca252f28a99e556bdcbbd229492ca0ed49c56d69bdb901861b6339b4473537d960b60de1b955f9f3dd416f89d49cf799bfe23af798287c959dd0a26a27f7867b133edef43521e2a29f774ccfcf41156f904627f71db43bf6272bae9582b283bd4d2e3c16eeb59f609ba5491d40e9fbceced3ce6be0c2965bba9ae8acb105faafa13be82c702078f2850c5b99aed73dd57bb877990fe34e2e67e82db1b2876b23eef3e6c2f2ae1fc9328895b08d0ebae18a0bf04e6ee07070aa251ea22a3e5d9aeb2c570211ee443ae1e6c27ca44c1cd42eb938b0fc404c08ef4946596446b88378e43e596d5c526a2a776ff35a225fb19d5fe1b4030109165c9a3c048ac51ac83278f03166fe71c772f99a3744e13aac7f73c66f8c6b7f5a9a2514d14dfe2bb168c96b988bc9ec9685c89abfe8657c57b21f36eeb73dffd13eae02d26831186f1148a149ba4a682814f1ca3017e02485704f856b264c06257ffd0780651a65196eb211b4859bc99bb8c01903a2f36a6f3c7cd7e6d07b8b1922eecc8523b39afa2ec68f67da32b32c1a5f8566d6eb5b3622626a472fe320f0601cc5cfe76f66cf876ca8ff142eab7d29188ff40ea33306234556055420a1e7e7c736587fceb5dc6593791f8978101ec8a451ce66700ae8c35cc0ae93be1ca81fb80f156fd2af3314a6f16ac4986cb723141ae68dcffc66cb05e3980080b46c1f2b41354c55d992764b8e76fa65cbe7a22e36334a420e40221cea158e58181c716f8136b2024ea0b96d957d66e6f93aea6b76d020391ad4d4bed259019021badebe7af0d7cad05257cbd26640565a10628244b4268478831930e701a9648657f233dfded4b94aeeab9f772e0a7cb7e2e1512750ad0608afdfdb1bcf6d8622e5fef1756139dacccb25495e903bc96e685b9277a1221a4c5add69be289056c751fdbccaac5d5d666f750156a0681186c067adeb9410fcdff615af64c6b45024d3a9d7ad11a791618135605c45baf4803c8c31e576427b9d83b034ff5ae120d4cbb9b05102d3611fab24ac8830ce0bb0a1b47b52bdedada72aec8c3f014d13c6d39f50c6cc6ef8f2ea59b1c7d6462049e6f5b4dcce430737649d6799fc576ad5750dc0d06171a8dcf96d791efc04d393fa0234ec2583cfd67c5af21d91beb3eee98430c5db16d9bc92b913183fb553fb4b324db1d413377c6eb23980d5684a6cb6ab9f86ce7a414daafc0a624eff1b2cf9508d6b24bf0e65c962710e049a89d65207f623744ed8b870794a73a798591ca8ae99b15ec6b5317fea5c3715ce3b9bad165d64e0d23a8a5da27eb27872f97fdc43c7ede28d82e3d7befa6c7ded6f3605be6e2e51af76164da92663e9627debdc93c3db500512009dfd0c462cc0460ea32a58b60829dd76cb493f9cd98d954cee2b3e1628ed2f98420d8ff3b814effb11bd7a4a392d537c2f97958b532ff990f0ec2f45d46fa2ff162fb0b61cf6e80731ad2b0d5c9df8e39df81786237468899e1a5f8f37d17b90a0562d27b1ba207bb3b3114a5bf73302ea234b5de2292a6a11fd9e1752ab133f87989cab19bf6ac01a777483fd2aedc9f3b940b07a3a33310fe4e1d2d11188816fc7e71ff1a718379e69d2c31e260eaf1f36f8ef75ea93c3c0be7ec744ad69ad8d2f4ba37438ba14fb66298a88289607894abdc3786b284bfd2f5a118b654abea38d8a805bddf950711022a5c29bd7708e76362976f9a4521757e5bedb57b725f529c4f5d16f8463eace0924142ad2de25e75b9d82f52fae6935a2f9d8227637533408672d3055e74aabf5eb7485549f0d4364305cc99bb063bea80f5a360c4a91defb5b40a453cc3ac89941ec65d02335768bf571107725936292a250d73a7b93d1f77168434933424e6b616398f127b54cdf5ef6bd6bc12f2e05cf37089f5def77624dabf5f0fe0a62c46a854b9efd99395f72f2390950b5ce5343c7056151675a533d07e510a93fcfb5434379ee81eee9e5e423c43b1239d355f747edfc8b0a125489ad29d87c48f1835add1d6afb67a0478b59c83306474917fe9ec0a404bac2cb922bc2d7dff69cb6298bccb2f5baaef0d87f7609f3a1ff7b4765d101a1d300853bc3ffcff65a0d7a590db410279e409c6c8e2b8c2c11847f67eac95c51c9821f706bbe91ddc5c69982cb13add3dad2e680da26af312b1298d778f6682c5d07b0e11dcbffa16ed1ecfabed04d5af3b842e5bdbe90305ffda3ea46fe666e2042bdb7b6b71e1a4fec199acc2d4e06c5d36dd1fefe90375e8165934f9330343544409772e5b87d7ea9793ffc8b85cff58402b67ca486e1ea39a898da274bb42d49f07c69da413afee1dcb0e0bfe8fe4a7ee176b26f6faec49e5fec15bf0a8fd71c11979e433feec54b1db1ef7af0e7ae567037b3d894ea7ae608d605f15df294044b604bc3894d7dbbcc15288b8997befb7245cd5ff4e6c3d86e883b144e22bca2cde18097ada75c74c3996d748021d8cbf0fa2557c390b5d8d4be0776619d56eae411a4484087923a0e088f81d1e59c864598db94098e0d20d825e715d151616452425dd47721414eb85b735067f7a2943026dbc21d17f85490c75275f64383b8ad135542217afe6921b71518dd8c567cdf40ade666884ff2e5f2bd4265a13bce3b9b0253e5dae2546cd919a4323e779a749d600d961c3b27b9d47609d516adf1e0435ad070c0a9847b94feab4b802bb83f618ce0ffd49d91832c871b3b7cd041f049b9fba3b1fd2f00c28406e6bfdcb67a07540a056e1dcb1a55ba8ed8df5e11a31b2ca4d79e4d3e508e21a3eff72cf3763e9a55143e1cd1fe931a89ddf1f211387a2bde0833b6781cb20129953c0ca286f1a5bbaae77ab16b0a876a008b342d559d23fed30b823832b2dc7272c93d9e753dd9d74f87d0aa38adc834858ba86719705bb373002bc44a64f19a0b8cff523dd2b867c71920bd951e2c75f23af828cff426abb9772573ae9d7b629c948320243c3fe16f33ff7dd00c81716aa60e75ed4bfe3ec32c4ee974b0056a164074224f15c1b18510ed7b2be5d082d09045287c916860ae05ed282177a4c364c8cef0d69e01eb00d0be4d6ec193641a6cc3e970f518abfa4fc0b62c4f5ad52101503e13ef484a32023262c35055b53b1c031d4deced0d878318960b16e03f5dcd6461c820c0b386c1d8f5d72bb66d581c411c70e018db8f121ff981df530388276fd387eae99b8ccdd2166431710bb86d581d3a2535e4a9703398635a847752aee1a4640976b7e94ef18b0e38a43a6406cd89fec1006225cd439cbf613852cb44871bade6cf509a36d9994c85783fbdc72fcd33bd6a660e238de4560292ad96ca06e822f54bea3c6e50fa32b614dd00f37f6731c8857f68016d0e865f8d5357062c530ec8df08cdd04d270e5cc6d7bc77a4c764adea38d3c75ea5d69e3637797324764f57548678a7597df073ec9b06e8807c032be02266fe3ae00583da70f070e8a2291edb7f334a41a6a8e992c0775cd08bd915432d2415569f3bddf488f3b2b678baaefa8429c3aad26a8120b6550bbf44a423f031743046538ad6d601ee83d5807efcc118af2da3a32509fa8f805869601d41e58d4c8afdd2d8e93858cb9524d2258e2f3a53c73b4dee1de95c56b1c085c091ae4d56378d421930db933291fa44c7981614a1419e422fdaeb1543bd55bf96d9c4d88451aff54c4daf0e7cc96ab5bed978144e89d5f8eede6d9238caf75c8646f41ff6bea683ad0f2886a63d91f5a40ba0d40638aca6bb4e9413de006e45c4697c5309f894978b00f6d264bbc9e29a1d14b151f484f3c403132872729bf46a76020dfe9d1a081b6cd689308a08a4b9420c4f55657c0aec86f54417ffe6d5ee285d9fab8233b657ae54a800ec7e1fa19ac7c83e129181850c5fc51839db320a220ea98917eccc490f44847e24fb95e3a50ef102327db4141e3af06eb16d467697a7bc6870e3d0f380df1b90d0977c4f658b188f7fecc0222e9f7374ceb272bf139cb7bd6c5d4664cf5c472abb1288a58144340f2e2d656ecf9e33af73ae6a24e073a627c13a202182dd733cb391ddaa807451a556671427bd59687cd5e6a4daf3bd2284812238537355bf411a6f5c65fcfedd6de849b5bc51498d8d74c790b6a56ec5a14ad56b08f4a05f57651c1b2c93b9168ae392e11d0440b3999388fd9f048423d4ded8dbf656b0aaf2795abeeab6603e7b4f984dbe2f4ad67caff13a6d3fc27551c374026a79d94c4b4352f49ece312a70f8a941121d851020a5b3e3cc8bd39a8f9db76720bb43d9393db02a8a5ea98650e295dc4035aa4b6cfea1ffc1c3c874ef3c138238ee8f2b61565496645216db06aa168bb985415778615c70929293b02ee51e289d17b793262b466c20b997c67a683ec8c8", 0x1000, 0x1, 0x1}, {&(0x7f0000001100)="645581b73b45d18cb784f42c67e5f923d3cb64602a1c125ecca613ae1e900dc1dba22840fe5f1524fda1a70c320a2d11e9c0cf11553cd0ac70019f2fed134a5515fa2b62e597e57b1f87b88f28cdba0f07408c0546f309e31dac25b2f5f16c3e6739d9de2ecc13bc7c034947d61819d2ada9d7c7b964e9e875ead5e005ded556fd22d3465ce7b6f1140ea496450d13c9aefd6a2f51fe8cb84db988175e1a213a23058f354209efeaccea874d01e03c258e13917c6b34e3b64b", 0xb9, 0xc4f2, 0x4}, {&(0x7f00000011c0)="d574a35a42ce131dd96c46ff092d33a62b482c42bfc2f1c25e3a606d3a0e2e4143f780fd0b595bd2c2bf67a334fddccfcc015e518f2f6320dd663588d80d0904d74e7fe25db987b4ece10a96d67636403e24cb6ac40fa16194b69b58e10938a22e64226313a9a89c40c8634b6e9ed38af3b013671fcfc1eb7e470734e0b283fb67838944b032485983425f993283cb94efcdf2dc6f9c73e1d14261ae8823674696ae89cf3269421194ce4e009c88348f9163a7233a943a9e53cfe22a3a0e232b02e4463add04bc423f46d78f97a6754465dc9e5a3cb3d3b51383", 0xda, 0xff, 0x7}, {&(0x7f00000012c0)="ab1db5e6ad3a82bd897e55e727528503110467ef88d21bded62fa5931cd100cce6f7bdb8a9e093ed3b8ac7ae1199044365", 0x31, 0x401, 0x8001}, {&(0x7f0000001300)="62ba087b738bc01f4ee7f7db4c89dff4ea6f7a27885e78d6160d7c2be8af38b6b303734375bd83587503784d40a6252d76f1ff64428566a1979792bb2fbcdbeaa80bab4254de2260b0048ad4b4f5a75ad7825ff001622631f9b53a1c3421b7963b54bd0fcfb96665d6e4673b35da63ebacae05fa9ade04108319e3fa59c268c046ac36a38bcb9a8233ecaa5ca85f402a1eb4bd0e4d60b2ac3230396fda2d68a6245e23e037670abb942da213344e2759d13d6aa9bd277c2194cb1d6bc727f6c3daf6a089af652dd57b91441ccba6165698e5f69415794d3e3a8dc79cbd3f6b57b1bbdb2ea8ecbc0453c10486", 0xec, 0x500}], 0x160000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/198) fallocate(r0, 0x9, 0x3, 0x4) [ 1734.502271][T18250] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.510802][T18250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283480400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1734.595210][T18250] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.603669][T18250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1734.653923][T18250] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.662398][T18250] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0xc04f0000000000) 00:04:18 executing program 5: r0 = socket(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x100000000000001, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000332000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) 00:04:18 executing program 0: flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:04:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2834c0400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1734.700314][T18270] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.708840][T18270] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1734.737942][T18270] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:18 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1734.746383][T18270] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283600400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800001, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'veth0_vlan\x00', {0x81}, 0x6}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 1734.805183][T18300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.813653][T18300] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) syz_io_uring_setup(0xfc6, &(0x7f0000000100)={0x0, 0xd149, 0x8, 0x1, 0x1aa, 0x0, r1}, &(0x7f00007b4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x2, 0x9, 0x0, 0xff, 0xb, 0x0, {0x0, r3}}, 0x1) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x40, 0x8, 0x1, 0x3f, 0x0, 0xfff, 0x4, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x1240, 0x1, 0x6, 0x9, 0x10000, 0x6, 0xc01c, 0x0, 0x9, 0x0, 0x3af}, 0x0, 0x10, r0, 0x8) [ 1734.855831][T18300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.864282][T18300] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283680400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'U+', 0x9}, 0x16, 0x1) flistxattr(r0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, 0xffffffffffffffff, 0xbab7a000) [ 1734.901462][T18312] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1734.909919][T18312] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1734.939623][T18312] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/207, 0xcf}, {&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f0000000280)=""/75, 0x4b}, {&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f00000003c0)=""/38, 0x26}, {&(0x7f0000000400)=""/157, 0x9d}], 0x7, 0x200, 0xffff42d6) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x11}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1667e98ab423c685}, 0x40010) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) [ 1734.948199][T18312] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1734.971479][T18329] validate_nla: 28 callbacks suppressed [ 1734.971491][T18329] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone3(&(0x7f0000001200)={0x1900000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x2f}, &(0x7f0000000200)=""/4096, 0x1000, &(0x7f0000000100)=""/21, &(0x7f0000000140)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) fcntl$lock(r0, 0x6, &(0x7f0000001280)={0x1, 0x4, 0x1, 0x9, r1}) sync_file_range(0xffffffffffffffff, 0x9, 0x8, 0x2) [ 1735.003827][T18300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.012370][T18300] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1735.107773][T18300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.116239][T18300] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0xe0ffffff7f0000) 00:04:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clone3(&(0x7f0000000280)={0x280000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x23}, &(0x7f0000000100)=""/177, 0xb1, &(0x7f00000001c0)=""/80, &(0x7f0000000240)=[0x0], 0x1, {r0}}, 0x58) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) splice(r2, &(0x7f0000000300)=0x20, r3, &(0x7f0000000340)=0x9, 0x2, 0xc) flistxattr(r1, 0x0, 0x0) 00:04:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2836c0400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = dup(r0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x400, 0x4, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x2000005) 00:04:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) flistxattr(r0, 0x0, 0xfffffed6) 00:04:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/166, 0xa6}], 0x1, 0x7fff, 0x3) open_by_handle_at(r1, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) name_to_handle_at(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x4c000000, 0x105, 0x1ff, 0x7caf729f}}, &(0x7f0000000340), 0x0) chmod(0x0, 0x0) 00:04:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283740400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1735.214144][T18352] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1735.239414][T18350] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.247916][T18350] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) poll(&(0x7f0000000040)=[{r0, 0x400}, {r0, 0x100}, {r0, 0x100}, {r0, 0x4000}], 0x4, 0xfffffff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2837a0400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1735.336533][T18350] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.341713][T18365] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1735.345065][T18350] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1735.435277][T18361] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.443304][T18376] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1735.443881][T18361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000500190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:19 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x96, 0xff, 0x1f, 0x8, 0x0, 0x8, 0x20, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xdc, 0x2, @perf_config_ext={0x2, 0x82}, 0x2000, 0x8000, 0x0, 0x3, 0x4, 0x2, 0x128f, 0x0, 0x0, 0x0, 0xb9c}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x404800, 0x144) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x202, &(0x7f00000003c0)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x8, 0x1, 0x0, r2, &(0x7f0000000000), 0x16000}]) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x400080, 0x0) io_submit(r3, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7f, r1, &(0x7f00000000c0)='Y', 0x1, 0x49, 0x0, 0x2, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xfff7, r0, &(0x7f0000000180)="dc03f4c34c017a1e39cc1df5d517ac6f829c", 0x12, 0x5, 0x0, 0x3, r1}]) flistxattr(r1, 0x0, 0x0) 00:04:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) mmap(&(0x7f000023a000/0x11000)=nil, 0x11000, 0x2000001, 0x30, r1, 0x4399000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) [ 1735.502175][T18361] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.510634][T18361] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1735.567112][T18350] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.575579][T18350] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0xf04a0000000000) 00:04:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/166, 0xa6}], 0x1, 0x7fff, 0x3) open_by_handle_at(r1, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) name_to_handle_at(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x4c000000, 0x105, 0x1ff, 0x7caf729f}}, &(0x7f0000000340), 0x0) chmod(0x0, 0x0) 00:04:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000600190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000140)=""/133, 0x85}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002540)=""/24, 0x18}, {&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000380)=""/84, 0x62}, {&(0x7f0000000400)=""/160, 0xa0}, {&(0x7f00000004c0)=""/199, 0xc7}], 0x5, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000840)=""/236, 0xed}, {&(0x7f0000000940)=""/67, 0x43}, {&(0x7f00000009c0)=""/81, 0x51}, {&(0x7f0000000a40)=""/205, 0xcd}, {&(0x7f0000000b40)=""/179, 0xb3}], 0x5, &(0x7f0000000c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x168}}, {{&(0x7f0000000e00)=@abs, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000e80)=""/66, 0x42}, {&(0x7f0000000f00)=""/225, 0xe1}, {&(0x7f0000001000)=""/167, 0xa7}, {&(0x7f00000010c0)=""/4, 0x4}], 0x3, &(0x7f0000001140)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000001240)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x5, 0x100, &(0x7f00000024c0)={0x77359400}) faccessat2(r1, &(0x7f0000002500)='./file0\x00', 0x1, 0x1200) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r3, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000280)=0x3ff, 0xffffffffffffffff) [ 1735.645041][T18350] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.653521][T18350] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1735.731511][T18402] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1735.751371][T18397] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.759809][T18397] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1735.793253][T18397] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.801726][T18397] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1735.825455][T18398] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:19 executing program 5: r0 = dup(0xffffffffffffffff) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f00000007c0), 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FICLONE(r1, 0x40049409, r4) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000180)=""/155, 0x9b}], 0x3, 0x6, 0x4) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r5, 0x0, 0x0) r6 = syz_mount_image$nfs(&(0x7f00000002c0), &(0x7f0000000340)='./file0\x00', 0xb79, 0x3, &(0x7f0000000640)=[{&(0x7f0000000380)="14a42c0cad48892a5cffdd634f8aae70dac9275a8089d3a567158af576acd9b0790ca14778cb1aec1c926f46117021901449976d428c419e98d8b66be2a1a7243fa397640bdc0cbb242388ea4c4e6d6a086a6fb235fd02e9addf7419d412d6ca3ea7d4933bc50306b836d2982cb2d159495860cd467676e3af39d999bb71a34f7141cd47997561e018aea5ec4565a66c914ae7b5758ed74187ccf30074f4a48a92bf1104e8650b6877", 0xa9, 0xfffffffffffffffc}, {&(0x7f0000000440)="74eb316c0b84aa9cc76d5be7dd0700ad624aa9665d7787f8ea3e4943d7ae49a1d68931bc179d732a16968d9a32379cc014b4f6b359ada1ac20018a8294a2c304767ceb42a003fbdee9ca607ce3026b0ecdfc1801aef9d0adb214498e14d225d8f910b92579ecd0b118a0612656ce1fa891b20301520bb0a221ebe117451bb5bb", 0x80, 0x4}, {&(0x7f00000004c0)="a5a834cc925a502c94bd4139b95d4f92cf615ad88d305f308f71558412a01ced5ac482adb1984e08e600a2aa4ba065c446054baf827679c0b2a9011a1ffe67a785b588c75cebb3585f9e1353791cec8cc4d56c65923410c50dd346f494eb1d095dabf25cdb77c2f4201b8f50766ef98cd386f24169b9c9ff57debe4c6b5208e361c89961b438de0537b2031676353140002b4e9240979cf7e002a7bb07d5fb10b96ea61e49c519cab46295b821e672518454e5e086787ebbf540b2c799c5ba11582decac3ef50af1f1d38465e4da99b9466448d7aadd5dae58e8973e81f5b305488950af7b2e4fa1ca0f5a08aed4995e744d0968c527714aff8852a0ffc0", 0xfe, 0x7}], 0x60021, &(0x7f00000006c0)=ANY=[@ANYBLOB='{,syz0\x00,%,syz0\x00,smackfsroot=:!!\'.^-,appraise_type=imasig,euid>', @ANYRESDEC=0xee00, @ANYBLOB=',defcontext=sysadm_u,func=BPRM_CHECK,rootcontexh=user_u,smackfstransmute=syz0\x00,smackfshat=syz0\x00,permkt_directio,\x00']) openat(r6, &(0x7f00000005c0)='./file0\x00', 0x84180, 0x43) 00:04:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000700190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1735.833931][T18398] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1735.864267][T18398] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.872732][T18398] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1735.884792][T18414] loop5: detected capacity change from 0 to 16383 [ 1735.887493][T18415] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/166, 0xa6}], 0x1, 0x7fff, 0x3) open_by_handle_at(r1, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) name_to_handle_at(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x4c000000, 0x105, 0x1ff, 0x7caf729f}}, &(0x7f0000000340), 0x0) chmod(0x0, 0x0) 00:04:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000900190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0xf0817101000000) [ 1735.969593][T18414] loop5: detected capacity change from 0 to 16383 [ 1735.996744][T18420] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1735.997828][T18429] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@empty}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) [ 1736.005205][T18420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000a00190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1736.108307][T18420] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.116802][T18420] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1736.133336][T18438] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=""/166, 0xa6}], 0x1, 0x7fff, 0x3) open_by_handle_at(r1, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) name_to_handle_at(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x4c000000, 0x105, 0x1ff, 0x7caf729f}}, &(0x7f0000000340), 0x0) 00:04:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fchmodat(r1, &(0x7f0000000280)='./file0\x00', 0x28) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x434480, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000000100)=""/116, 0x74}, {&(0x7f0000000180)=""/174, 0xae}, {&(0x7f0000000240)=""/16, 0x10}, {&(0x7f0000000580)=""/37, 0x25}, {&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/204, 0xcc}, {&(0x7f00000006c0)=""/79, 0x4f}], 0xa, 0x4, 0x294) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) renameat(r3, &(0x7f00000005c0)='./file0\x00', r1, &(0x7f0000000740)='./file0\x00') flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:04:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000b00190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1736.152110][T18428] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.160602][T18428] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1736.231426][T18428] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.239951][T18428] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x200001, 0x0) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/235, 0xeb}, {&(0x7f0000000240)=""/203, 0xcb}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/15, 0xf}, {&(0x7f00000003c0)=""/199, 0xc7}, {&(0x7f00000004c0)=""/78, 0x4e}], 0x7, 0x400, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) 00:04:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000c00190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1736.283389][T18428] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.291897][T18428] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1736.303959][T18451] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1736.352164][T18428] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.360642][T18428] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1736.385061][T18442] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x100000000000000) [ 1736.393518][T18442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1736.419704][T18462] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1736.454895][T18442] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.463414][T18442] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202400, 0x0) mmap(&(0x7f00002ee000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0xdce68000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x880, 0x1a2) close_range(0xffffffffffffffff, r0, 0x2) remap_file_pages(&(0x7f0000336000/0x3000)=nil, 0x3000, 0x2, 0x40000000000000, 0x40000) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x48a80, 0x16) flistxattr(r1, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) mmap(&(0x7f0000692000/0x2000)=nil, 0x2000, 0x8, 0x10, r2, 0xa5c03000) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000040), 0xff, 0x40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x339f, 0x6, 0x1, {0x0, r3, r5}}, 0x7fffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x110, r6, 0x115c000) epoll_create(0x32) 00:04:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000d00190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:20 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/166, 0xa6}], 0x1, 0x7fff, 0x3) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) [ 1736.563239][T18467] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.571719][T18467] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000e00190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/123, 0x7b}], 0x1, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00200, 0x0) flistxattr(r2, 0x0, 0x0) [ 1736.655320][T18467] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.663785][T18467] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1736.730318][T18480] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.738774][T18480] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283001100190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:20 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5c1140, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000051a00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cf80)={0xff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x0, "47e9f264f8efb3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x3f, "4c69a69153a7fc"}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r11 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, 0x0, 0x30) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, &(0x7f000005bf80)={r14, 0x0, "c6f8c2cb2599e9dc8fad9b890314908e6fad511bba74760dda3b78c0305311dc49e6b7b103d780133b7367ba99a94f25a04e251a8d58cbbf655fddf0021ffd2bbd7d5e7f2a0afb343c7cc008ce8f687cc3270e4df07328abfb83c33aa3815aaf8d4b05cffd91a8125fa76af126a40f7f1092609ae92d0dbbef3a65195d7ea7455a6cef5ba06f40f90a916153c51ac45a1d9cb847a346a9ecc0b7940ebe08741d9acc8c1bf380c0ea192033342c1f6ea74ff27b70ed47b5bbcbf04216d66e524eddd5692823ed23feab20ae447b918801dbe6c28cdafe4294f84ec2f893ba05454e784f783ed76d9a1da87f34467afcaeb97ae81e9ce74bda8f5dd5135a011522", "3659be393952f0e0924843f980dc972675d4d9c940bcd19e82ee45da25fcb6be53ae4c20157dd95a53209850931ed82cfd4f451aba63306e2cfab505796b97699ff4659bb8ff00d20c597d72c3447db0ef476792f95c28675e30c6aa893772b7f17e74e8b021debc385ab6346ca7462243b09ae250fc74b692f1450d68e78aeb31765cc0715135d4cdac94063522d3f446bc6fbf4a55dd8231baf0bd1a0dae45eeeb3aef00dac22eeb23a0dea8bc8e6a03932cd33ab9a463646f59b18a1c304b94c5b4ae07445eecc293c33faff92420b79a84dceecc1020d6bd2e9e531c0b8767fa62a4d807934f1e08d952ed0b2d9ac739738977fefefd81b137047ce2fba3f4e02d7093be8944a21ecc9937454ae10394bd70a1716611e1b1ab25a44f1438c870a607ef96d56d61f6dd3273e299716e456e7ba3edcd5b1c5fd9e853fccea038ad0367eee35866139945017cde83ee133e54b1a0a9741bd174afb939bb0649d589304321a7f8b16b72c1541937898e7165f582c3ec999fed8c6c937d535ef7261b30ae1dc3632f4f3c406badb70ca4788a411b26d02f25d6edaac0c3b280521f50b8a4fcc715e550c0236d80411bfb356213e5ea849dfdd26d7d4f6bf4c25d68953c3e32e1249589097ed9c11c7cca35c2d2709d42a97849413a09991ce97fc026da7de67f2d64e5f18288bbefd5532bada44e658f9ca10d277cf7edba97488d48fa5da398323229a120df546e5e6c913c96e83b8400a01a11711b760dae7205f1b7bb1cc11fab8c7239ac008b11a013c6b23a003e59cd011bfb2381eb3211af45b309984b6c02a2965c87a1cde5ed3c20f8ddf74cb86bc114af674ee447b948d2788e0391890663146d3096d0e27b1daf527100f2457ba0b14ce751d0f5dd3dbd860bff9c47edbf86ddffb256805c466c35eb114e318f290442b9d64520ab99dd26fa1b26a33b7f545f6d0541626f9a86e3b101242f7316166aaca4f3f80c7aa94bc407c941d65789a1eaf7b116050d02778c3ba798b786cf17e7c04b08ae41918343c1d3177724dd48702b6c112f3c30e524d2c4015e1fd6ae9d956a34c33e669ca52928be87c4ad0525b47b259bdcba1b341647fb96a28352aafc84baf23145ea9d2c9a70c333de5021149b2d660c89cea6872ce1f669ba118cc90b13789a756a8a42938d77d5db6ee92eae86f94b23cf2a079648edb3da9bd86a9d71d9ce69908c9c80905b8a8daee6ad98c54b4d054319ff6aa36bb80f39127faa08aaebc4b64207d560a6717ee4c0c9ea416423ab3929f8cdf7634c996e30fc81f7b8094ad324ce69b445286f06bf985a3434e9ed8fc7a38f4174b02e0e98280c8a38f8caca0559f9d69be5d86b84e32e826a726f2c0eb1a1682e63c31c1f3d56a93d203eb095509ed6e7f3c63ac59ecdf0803883ada914f1f8ee64ce9e0c22abbf3180f4d5e1ece8a9521f42432fdeb0656a26524c872ac62590f442fd701976d98d3018f94e153bdd85a0215d13c7784ff0b503b588e0d613b9056ee7e93efd1bee8ce606b425b591c7e7eb43cc7c9e5f3e263fc4d019de359a9e51d35ca4c5f71341458073c239c9728fd3b9ef47c80902166451cc109d20ab6cfca825f35b0aca3d05c05fda1e162fdef2bc3a9d914a1c719effb68060a262c26da165acfcfcf1aad6b4d27564cf99f9a82010fde16e33d80128cb7187d57659d7d754a3e0147c06627b93582d96a5891d5fa4690b87a8e74b3bcaf89e75764d32bfbc54d90bbf28f87b2caaf88e28b440c2ce76bdb2f0a95629c2e3822effec3680110abf78895e5f7ec9cfb82d7842c43ca34d851b59b863a6d6061c5bc0688aeee823d7bde013711753506b9d7c19962cf422307be68fa7a534f5adf26355b8081e5fcf2791813847775bf74d37974dde12564f2d571f720bd9792714b09d9588d837b1629da4c2e5edf8d866f948a47787d8c961d3ce5d7997babed06cf6e17eb57402bb3a4700017e678161548abc1dbdc021c116530bab488cbb157feaef7e8545b10ae592dc2942490ed7783e3056cf1432f647147901bc69be52837395818bad6fbb3c9d698ec54c02e3600308be84ec682c6281497b7afefb984fb4c22fdf4e72b5736d9e8d439f5945e6f431f289a7963d2e6b612273f9a15bdbc12370bf4f6d75bb3a7d7af82b98c7576ef2f5186b3ef36277ed262159112cdda7505d65afd8bd14248269ffcfdcb74198d30fd216a5412f4f407fc8f4b999003f35b6694acb6d9c24403cf5d3cb95e52a8f7ea7eb504f60152fe15b6854e5b206355901be1581ad4cf454f7c2237934f3e1c567899d1b88f0f14a0fb41d685b3c451490feb15691ecc7ab8fd29744718d53f5452ec4f2713efc89e2547a3a66c271a65bbbdc0f4efd5ac0d1fe1d83fc6a2dbcfb24a4ef302556ac42207fa976ca128dfb950b46388d95ecc4f53230e1572d84c854b772d1a0ef369e626dad505cac2db2e0f733696742a85699142b764171fccd70998e27126c550ea342bc075496979e85a387e705203398d8c93b5584e2336ea0bea14ebd6349eb80010e212f464798f97fbaf9c4f2817e4eefb6b6fb06f5c6703781a5605f4c619e45520473588f64ab21656a28cb6c2ac183e14e4002042c26fcbb17f24e02207701cb811baba1886663daaebf93f8b11495cc287742d9a786da6e3911f2ca5a141de3e2bee1cae83f467d2ffa08449a7a519a81f1683937c07a98e53991fca13dc4fb992995725514565574a98574e4d9a2b2d2b4a084fcabe8332fc1083439f912ce2192f306f3ad864294f30a44a41b8778f11b419965c4f6df1495062ca783c69f26c3d5e3f9cb10f1b9d2a26d9e1fc3c1380c7969eed3a20d8775138b3412ae931566c0f6427e7b7e20033bae9f1d7bbbfa38ab65abd07beb9c6106dc9c562b4cafea056de1dd5cfa3eb74b2895ee63611129edca330125e13c42406d7f7ae73e6b782ae5433826abee44eea2ecbae32b473566e137fae850d0cb4b3e65cc1c5ea371b0c1549a9cb7f6946d462eb83f583a7411c40dc759c6519ce5b451c241737379d4a7898044ef92bb7af29a37cb5f7cb5cdb3e18d8075cd6f7ad139541452dab7a8d283032d16bc267686cf6dd2aa2629a73d5da564b66aa38be1dc38bf55b9080ea143112c957f231600f65d7246c103575b9090c90f33853d19f9c283e2b5372fd297161a88cbdc4196ff3fc7372c7ab91a12bdbd812fb65c85c2195a2a83a9b3d524cae3f10ae236e5895295abfe4322bb1be76eaca477af7ecf1ec6f2860cc5a6fab617b478314dcbd2cf860ca3dc6fcec2984f2e9b2deeea8a029cb3bdbd579faa2a348f497feb960693a55e80dc75f856ddc74dbd5a99fc462e76ea80ddcd0467db82d055f0ffe3172f0772e285a51f62123bea7459dd59c62fc6618880bca9bd8c82538a441d64034179f76e7a6e9b17c101ea4ff208db90df8acfd3d445315f03f2ea9e98dca492bc366392dcbcd5f880be45090b2896fed03854c6d1ca30a3c17f1376fd9b3cf57205e8ccfbe1b6281d8065a772ee711414405405a3cd409ad60df80a3bcad8944b5c05d41d70679312af00c25cd8e3d3c43a6061c2ec0e2f6813322bb52a405e65cc2cde242eaf800cfe12b2131670de9c20b63ef24a1569a22a03a0aebc54995797b80dc7a62b6af1952b497f5ef54e986eadd079c06899d28909013e9a8c0a4dc4d4c0372745734d38bc045d0a20a8b427bbc440d3b877d25ce850f9093819c1e971222b4378d5e3c61e315ccd9c3a427bb75ce8f386fcbf0d79a2c08173472a90d78b754af0aae26ebf96cab19cdeeb80e470995fb2d43e6cef2e3d95f496730bd10539b67c2c4853c3b6e9d74170af1bd9d4439e106f9538b5d97751564e3d2972c9d795d7f7fd87d1af5cb2edfe36e57961a1a36b366d0c1321216489a8e073bd0ad357aecd1b4cdb68840d042ca89d36bc7ceff46ac0286c2738e2a750a66f618908ff49b4941e7ed5b69607791ebb8535ecc671c1aca27d36c8130dcd51e3e1b9964ddaa632b15e89ddc8b5161c394cef3d9a3e42857961088b155d3415d09b278a94d2255754b9c05dc35da66477487d730c4b10563e439e3a4293723d5f25ffe6fcef9fe67e005fff77d957e0b46f7de8d23d2fec973f4f7f279f6cc04f1f93ccb7b61e4ceea9a690aa0c76e3de4e95e215f51bdf71b83e8160b730844900c1e592b68f9b8b2a4ac83adc220d5d8bafd23e1d57ae18a8b4b6cdee707821fe5f7a630123aa7fad0eb7d01885149fb2f2868153647a511215cdc0b62e772e53f3d03cbb2c37575c0629fdf46832af46924f05b6b1c006eb7344289fc0620b30137851e874290632774fcfe17888fb36325339a30b34a7957c71f28c797f07878116a2ef8e421149f0243a28210da6e88487d6e7b1b42bbb9a53b65c0073210d6a60a42d50f1863cbde06ee9226f75315d1398c33a39897f6fea9e22c27291566cab238c580e69f156b5ab202f93f49d174afc6591cae91eae1b541030ee98c13724133c2fc518e1bfad747538db6e1f9854345188a856efe8411db45a3ab89f85bc288842539c761548a2096b57400d40959d0988eb83db235401539d0c7e80b7f24b13001ecd490481530730ec2f7ee6530060c13124216d902b184316ec2a273d762c35d239e7dcc66a9fa1ae5c9eed538310f9992786999b1d93677404b58048cc31fe0484bcd44a86994fdb3ce074b289c17daddedfa9c9a51e1fa2fac50dc82b31a0930556f12e5ff1c25ff869292581d95c9b55326b54aee20895cbb0bbdb36a402fe8f9340a757e3049eaade8a5a540eee795dad75a087be8f91d0ff3a5c5d4d5859b75f3505f217417df8c643331de439fb8c9fba6ac278711375ae346524a297432872fc76d16a2d6a3a88fed26255c2a926206cd40ba88b087695a92d265aa9dc62164cac9fc419d2823613920739df81973bb157dc1547cb7d3ff43c843df007ece3db9b2d5834527cfc6889307a00975e1cc92b21bfc87f0cc34a9e091eacafdacbb2179ca1fc2265810c3d32910ca78b77683d7d9a24eaaf1d837f0a12ac84c3714fd37740a1c500b488be6624e016ad3873a238f71270d99c5ad7b4ac6bfd5aec9779e12b32be54ed4b8f1b8fabf1a51a24b2e48d69f0b2ec3966e0ae11b4f75b5c69491615b8dc5d00c092e76408e902d86946184610cebd56dc42c938f4abd4fc448100478ac7035373ff6981ffee33d128916b96480579dde622ac274a457dc4f493e48617fbfa350a4cd656c2ffc2c6b3d2d2de4f77a4e8a2ffb24749e5e300dbbd2d17003ad3a942f06193335cd101eace6236aa28efe2361e60484872eef05c780ca83b699589f1a11507d9269aff2fac5e46cc13b4207cc65f3f19781dca"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000051a00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cf80)={0xff, [{}, {0x0, r14}, {r12}, {r13, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {r13}, {0x0, r14}, {0x0, r14}, {}, {r13, r14}, {}, {0x0, r14}, {0x0, r14}, {r12, r14}, {r12, r14}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {r13, r14}, {r13}, {}, {}, {r13}, {r13, r14}, {}, {}, {r12}, {r12}, {0x0, r14}, {r13}, {r12}, {r13, r14}, {r12, r14}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {r13, r14}, {}, {}, {0x0, r14}, {r13}, {r13}, {}, {}, {}, {0x0, r14}, {}, {r13}, {r13, r14}, {}, {r13, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {r13}, {}, {r13}, {r12, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {0x0, r14}, {r12, r14}, {}, {r12, r14}, {0x0, r14}, {r12, r14}, {r12, r14}, {}, {r12}, {0x0, r14}, {}, {}, {r12, r14}, {r13}, {}, {0x0, r14}, {r12, r14}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {r13}, {r12, r14}, {0x0, r14}, {}, {r13, r14}, {r13, r14}, {}, {r13, r14}, {r13}, {}, {}, {r12, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {r12, r14}, {r13}, {0x0, r14}, {r12, r14}, {r12}, {r12}, {r13}, {}, {}, {}, {r12, r14}, {r12, r14}, {}, {0x0, r14}, {0x0, r14}, {r12, r14}, {0x0, r14}, {r12}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {r13}, {}, {r13, r14}, {}, {0x0, r14}, {r15}, {r12, r14}, {r13}, {r12, r14}, {}, {r12, r14}, {r13}, {r13}, {r12}, {}, {0x0, r14}, {}, {r12, r14}, {r12}, {}, {0x0, r14}, {}, {}, {r12, r14}, {r12}, {r12, r14}, {r12, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {r13}, {}, {}, {r12, r14}, {r12}, {}, {r12, r14}, {0x0, r14}, {r12}, {}, {0x0, r14}, {}, {}, {}, {0x0, r14}, {r12}, {r12}, {}, {0x0, r14}, {0x0, r14}, {r13}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {0x0, r14}, {r13}, {r13}, {}, {0x0, r14}, {}, {}, {r12, r14}, {}, {}, {r12, r14}, {}, {0x0, r14}, {}, {r12}, {}, {0x0, r14}, {r13}, {0x0, r14}, {0x0, 0x0}, {r12}, {r13, r14}, {0x0, r14}, {r13}, {r12}, {r13}, {r12}, {r13}, {r13, r14}, {r12, r14}, {0x0, r16}, {0x0, r14}, {}, {r13}, {}, {r12}, {0x0, r14}, {r12}, {r12, r14}, {}, {r13}, {}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {r12}, {}, {r13}, {}, {}, {0x0, r14}, {}, {}, {r12}, {r15, r16}], 0x0, "47e9f264f8efb3"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000058940)=ANY=[@ANYRES64=0x0, @ANYBLOB="0400104ee6c615f33eca967d1e96580000000000000020008fbd3cf3ad01000000000004000200000000003300100000000000000800000000080000ff03000009000000010000000027faffffffffffff1000"/105]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000589c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058bc0)={0xc170, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {r20, r21}], 0x3, "b79477067bd9ad"}) chmod(0x0, 0x0) [ 1736.829037][T18480] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.837481][T18480] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283001200190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1736.892602][T18467] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.901071][T18467] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:20 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x101481, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/2, 0x2}], 0x1, 0x0, 0x1ff) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/117, 0x75}], 0x1, 0x4, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) sendfile(r0, r2, &(0x7f0000000040)=0x5, 0x3cce3910) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) r6 = fsmount(r0, 0x0, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)=[{&(0x7f0000000240)={0x114, 0x41, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic="f512c226218e08f7d6163635a05d9b838ab487d5e5066869ec13b5c80181f88c784b62c579f74a5b94ce0e889b54c40b40ae03ee3c85c45707c96a43071b60887f3c000bb590966f81d67ea2b58ed21b596c0db8296fd86e0dd270d63cf47ce0c5c11eeb89fa5d05b3c2405a7da167f999b6206237c7fcf9aea6ba545965a2dcf7be039c2dcfdfd7c8c5caac39499d9138ea0b2facaafee8", @generic="46258a8635895757ccca7c506f115e48b233536eee5d0c808f39715f63f5de0b2472853de192aaa7db1a4d51818da977aa80bfbb6b852b2015f36ce00c4f44ca736ed765733b1489a36a0c4c625e97744906696ab0008608c8e6188cfacc5e3fcd0eaec09c634fb94e8f7f89"]}, 0x114}, {&(0x7f00000003c0)={0x2e4, 0x15, 0x8, 0x70bd25, 0x25dfdbfd, "", [@generic="9fdbe1e21de7c563db60b63a1241bda01b023ba7738646501c17c4f1a6f4f1a400c97e66a2713521b5889592a97b29ad01366d6d428c2d7be0d3feab75c9d17fcd360d05dcb9e648a72264248ab59a742de542663771371a3ef8fe6230f5f704aa307a563ccc40c1d4741150063c19f861547fc4f502debc76df9352541bf754454ae5792e3237a4feb3ac937f7815f9b00f7deeaacfa4dc6bbb8cf97322427e1a", @typed={0x4, 0x5d, 0x0, 0x0, @binary}, @typed={0xc, 0x1e, 0x0, 0x0, @u64=0xffffffffffffffe1}, @nested={0xff, 0x5f, 0x0, 0x1, [@typed={0xc, 0x2d, 0x0, 0x0, @u64=0x3f}, @typed={0x8, 0x4f, 0x0, 0x0, @u32=0x2}, @generic="6fd444c151a3c3c3412894dfc3b3310b1528ae676d55572b63daff953394d42a3d0a1d104f1ec1adaebf153b90dfa554bbab68014eeba2fef0538a5b407d9147ff9883f847d6179d8a7f9160e2a29308f0cc41b451c6da671462dc8747cfb806915505480d2119af7f1e83a8fdc939067277203a097a7dc3b937bf6248b14bdbdfbc0940cd8904a7bf8712989a16e352e04e6fec75a04e6cc061ed682b823e6259f3f4568f87ae0a98333b56532db0e4e74385c43ea28389f222c9fcd37312a187b726dd7aa81d8c391e2763fd613e75a7391b2fcabdf0", @typed={0x5, 0x74, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x91, 0x0, 0x0, @pid}]}, @typed={0x8, 0x19, 0x0, 0x0, @ipv4=@loopback}, @generic="b86cb49996dcafe10ab0cafa084d408f7478a2910fb82562abb3b74d37fc3daf045076dfa8a071", @typed={0x8, 0x27, 0x0, 0x0, @fd}, @generic="03e7885a03ab15c83d40705fa4816fde0a474d25a8b32c593fe789f647aee93dffc13515173dcab4bb52be3e726e1861ff4ff7450281b066cc59c950658cdf2f4ed52da1f86d25a30d5dc78cd78746ad9ae75f9486370187b22bb6021d8c71834083a3193b2765bef5f9389e49986f9d32a4b051cf5609175caa8567806c2702b402cf89b3ad9ef909687a581c2fad9e5a9574ee6f46c41df3486f7a095d8dd54a472cb6d133cb387c07c924e2107ac983ed9b76a00ce5fabcbaff3b9c02b867c5284e8a9d8f97af529c6f6e5833cd5e5d1539146c642c176bce90c8d1e66344ed24cdaaf4f63b926ace"]}, 0x2e4}, {&(0x7f0000000800)={0x394, 0x1d, 0x0, 0x70bd2a, 0x25dfdbfc, "", [@nested={0xd5, 0x66, 0x0, 0x1, [@typed={0x7, 0x20, 0x0, 0x0, @str='--\x00'}, @typed={0x8, 0x28, 0x0, 0x0, @fd=r1}, @generic="f996c305ef22e5027cfb21790464a2f47d542a96a65404cda02c2457476fd0763deb2c97f6fb0003de", @typed={0x7c, 0x7b, 0x0, 0x0, @binary="d8c7fa2cfe06d735ee31258d31c88a1c0b817320a1c50238d71a212a6029059a3a05a221e25f731244bf89c947d198e32d27cde330193d8045c566593dcf1ce5a124b246144aab72cbaeb7d117d263e31da9e0cdfe711877b8a0386df72a5468490650acb68397e0b510e02c1f5280f2aeb4ab2296bde622"}, @typed={0x14, 0x74, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0x4e, 0x0, 0x0, @u32=0xf3c}]}, @typed={0x8, 0x94, 0x0, 0x0, @uid}, @typed={0x88, 0x3d, 0x0, 0x0, @binary="652e78018a5d2ad4ae1fb0f05e9785fbe324a93159cff367b9353baa2f134a69fd54acb8a413acb14a1ae53e7a2b9cf79b7d70e2e96435177c59a35a10aecb82bf86b0372cbf3bed4d2cfbda498387c98e7a99d520f1bd473a58ca87f7baf355ffc7e4d170b78d140ab1e52dd7a59924bab56d7b7d1778d2067dc7ed0c69861f032e9536"}, @typed={0x8, 0x74, 0x0, 0x0, @u32}, @typed={0x8, 0x2d, 0x0, 0x0, @ipv4=@multicast2}, @generic="9363afda3687cdd80edd624a7d2b31d491e5c91e8f69582cea9b8253ccff3af8", @generic="c5461c5e892980deeaa378d039fc05a9424a76b79a5bb729047e0a71b5ef7bc9a1c94c4cfbddb185c9090a31b31a9a1a259d89be783fd0e454478d5f1c2dc9b929a88d6e059b33f974401c46946b19285b191be88a8bf4de14f0f5218f7c80040e87ea97fa8768b930ddafb78b085773683b30c7e50ab736fd04ab580a0e49c30f7db92159493b737b920d64385b7625919d4f73a9af90f795f699f522e92fd61fb18d61475acd6810f6c8fffce580efd0596e9c9425be948a636fec1e49074e8e2f98e15ee6fd5b943c5fcddcf5d480453f512d1683a0d7ba4401dbf98568390a79cf3ceac08bd810b2", @nested={0xfe, 0x6f, 0x0, 0x1, [@generic="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"]}]}, 0x394}, {&(0x7f0000000bc0)={0x420, 0x2a, 0x800, 0x70bd25, 0x25dfdbfc, "", [@nested={0x25d, 0x40, 0x0, 0x1, [@generic="bb975812a1aa2d324a884d7f7d27379883853c431d59c7b7ceffc598da357e8b76aade70c1224ed812d35147b8c4bdb68139c5a5667b5596f0111e9c9e828dad257ed9ea1d95fe6047a6f7fd793c744401f5f15aca133554252d2acbaad136888b0fc002370f4dc739bc1db85a2f7887943d27b75464de814a6f582cef9311f541cf2e109bddd9ba81367d1a1e514d2d8166819f11add64bad6cb346857a7d2e5c3361efcbf77dc7563663bcdb2e82a18a32fa9ac3da70ef4893a42948a396b13bfcdf185e5463db5912c894b8b1a8912d834b193c70ca4d88b26c91a0233144286fa1bd26b47f0a1ab65310c73cce563895a37339d918e344", @typed={0xb6, 0x6a, 0x0, 0x0, @binary="50837b10c9fd6732f57900d6a93fb82dcd0a04cd4e5a77ac9fd18efe0c7f071a528fdeb2996371159ab86d56addbbb222a9aa5370cf22f5eb4f4882771f560ccf37887af960fa529ae3e261682ea99c808ae2302b4ed0216a9b8a1628f39cbb4e2b806b53fb6d198053174030a4132c0d79c55430de42ae693bdd04c762250d19cd3e7d3e251dcceca88108d3be47a46950e06df80925eaa00d46579fa79aea9fef76ea4cf8d923beb25111e755fe1aa70db"}, @generic="992ab9c9e63975408b01e7231b0e742b3b38bd28b655e5dc251858eb8577cc09b4f8b1ac6e63933f220fd91757924e7b561e2ea29db48551868f26daf68a11549916a19198d971ebae84c2e75337ff72c51ba32c0ffdf1b849850acf8916186f23a343c99dc5fb494a4301b0ce966fc9fc8f01546b31bcb9c0afd7a7f28239badae4bd0a9ba0016b8f81d94f139aa425c0993ff89b3d4788b2c7e2b73bd2309ee4459739b82d18cc"]}, @typed={0x8, 0x96, 0x0, 0x0, @pid}, @generic="0fe5c42d8f0bd2abed9cfbd1a1e167cc8275b3f178e6c1aef2847264de89f44961faaad1e3db8d3c060458bc07a3abf6c5c0440dae03cf2b22394ea0c31bc7fae6135685ada8e32cf9bdb90e924f3cd651711d4a17f78bfb5a1413ae1f696d0b66cdc4932ea05d5c95720ad6c4f98a1b7a50be1c3adeed8fc21f9cd1107dd8897f1d6d94324da8bcf3e2b6250db2decc103b55734a61344229ec2ff7cdb1adc2fabb8a6361cd125b4d9f883abea99da7", @generic="0e8f49d2fcb0", @generic="c8b4f26b30bf7a20b1c6d37602e86e2f5190f27087304475b9e5b0873c89e60e725e69afad224a6eef970c2ed8abb4a3042518e51b4178705ae5d6185e49fdf887c46c282d01648803541161941602028bce167c06bdc0804fb9a678e2fa8e2b3056d6f0f4f46a13bd6b5f495e8993178d8cc81b5fe4e54499eb89b13fbaf15bd2b15b4d5954fa0fc191bbd5e162ef2038c94c3cfef05589468444397007a2e4f5250c0c22c7936d1cb4cb73cf3c66f07ceaf27d98a1b23edac4af643b15056880c4cdf09474ca6dc638d65b3491ad2f0dfca3eaa8f57d4f3fa228ad1bd3fc7ecda7dc9895f774cab4d6621b6644faa32309"]}, 0x420}], 0x4, &(0x7f0000001580)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r1, 0xffffffffffffffff, r3, r4, r5, r0, r0, r2]}}, @rights={{0x1c, 0x1, 0x1, [r6, r7, r8]}}], 0x70, 0x4000041}, 0x40840) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r1, 0xb95c0000) flistxattr(r1, 0x0, 0x0) 00:04:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1736.967036][T18467] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1736.975510][T18467] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x200000000000000) [ 1737.012202][ C1] sd 0:0:1:0: [sg0] tag#5226 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1737.022569][ C1] sd 0:0:1:0: [sg0] tag#5226 CDB: opcode=0xe5 (vendor) [ 1737.029627][ C1] sd 0:0:1:0: [sg0] tag#5226 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1737.039182][ C1] sd 0:0:1:0: [sg0] tag#5226 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1737.048752][ C1] sd 0:0:1:0: [sg0] tag#5226 CDB[20]: ba [ 1737.077381][T18502] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1737.085836][T18502] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000200190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1737.120390][T18502] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1737.128849][T18502] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1737.151279][T18508] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000300190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xb, 0x4003010, r0, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x82ced0aea53ccdf, 0x11, r0, 0x10000000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd=r3, 0x0, 0x0, 0x27920a85, 0x3, 0x0, {0x0, 0x0, r0}}, 0x81) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x112) flistxattr(r4, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, 0xffffffffffffffff, 0xb361d000) openat(r0, &(0x7f0000000040)='./file0\x00', 0x600680, 0x80) [ 1737.159743][T18508] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000500190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1737.236312][T18508] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1737.244803][T18508] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000600190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:21 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x533, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001f7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_setup(0x55d1, &(0x7f0000003380)={0x0, 0x9dc9, 0x10, 0x3, 0x25c, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003400), &(0x7f0000003440)=0x0) r8 = syz_io_uring_setup(0x533, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001f7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0x0) r13 = open_tree(r0, &(0x7f0000003500)='./file0\x00', 0x101) syz_io_uring_setup(0x3516, &(0x7f0000003540)={0x0, 0x1c40, 0x20, 0x2, 0x24, 0x0, r13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f00000035c0), &(0x7f0000003600)) syz_io_uring_submit(r3, r7, &(0x7f00000034c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000003480), 0x1, 0x0, 0x0, {0x0, r11}}, 0x2) preadv(r1, &(0x7f0000003300)=[{&(0x7f0000000040)=""/108, 0x6c}, {&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f00000000c0)=""/76, 0x4c}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x7, 0x10000, 0x2) 00:04:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x50, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000040)=0x3) preadv(r0, &(0x7f0000000040), 0x0, 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000526000/0x3000)=nil, 0x3000, 0x0, 0x810, r3, 0x204ec000) [ 1737.305573][T18512] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1737.314091][T18512] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000700190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:21 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) [ 1737.382927][T18512] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1737.391452][T18512] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setxattr$incfs_size(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640)=0x1a2, 0x8, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r1, r2, 0x2) flistxattr(r1, 0x0, 0x0) fsync(r0) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3, 0x7, &(0x7f0000000400)=[{&(0x7f00000000c0)="1417169879e6c76e1a4bec3e2c03", 0xe}, {&(0x7f0000000100)="f5efe16d3deadbd9427bf67946358aaef3a5a3fd6ceff1332359b07834698251b9", 0x21, 0x5}, {&(0x7f0000000140)="4132511ccb80576501d2c44f28854f819538c12b4ffd19d8858a240ee6c5071a4fb7ba2ca809912e70d1af5a20bf39452b12bf842be6b255a5707308f5af7ae18cb366bbc5645a99455ab681634e03b7db6383abd09b175b9e", 0x59, 0x7}, {&(0x7f00000001c0)="8a893c7a337021e22fab2799c688350fab7a", 0x12, 0x380000000}, {&(0x7f0000000200)="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", 0xfb, 0x1}, {&(0x7f0000000300)="1a2c008f4dc6af24111c460e57fb392c75141a98c5bb50ba2fcd5c7f4f612916c41a3aed39bbfba942fc222b08a4d159a4f47d5edce932f0b2a0749eb5fe8284c6f2793ce2f6f0f09f141cc4b64c57531e07062f597684b6f980a2955531f7df61c8f805a5c6d19927138f867851d5570828e6cd52b00dff840281690595780b5e27240862a095188ac67d1150014b2195d0247e5240bb12e8a31103a524502ae0409d31ca52323b2e5e5cee76c0b8a0ee0c3c44d5", 0xb5}, {&(0x7f00000003c0)="edce54204139721df937b1f167ea3c30d62be834c08c7d3a5d974341df4f", 0x1e, 0x3}], 0x9, &(0x7f00000004c0)=ANY=[@ANYBLOB='discard,nodots,dots,uid=', @ANYRESHEX, @ANYBLOB=',debug,fmask=00000000000000000000010,nodots,check=normal,dmask=00000000000000000000006,audit,fowner=', @ANYRESDEC=0xee00, @ANYBLOB="2c7065726d69745f646972656374696f2c7375626a5f757365757365723d249a5b2c00"]) sendto$unix(r0, &(0x7f0000000680)="deaba6f2052580e76cb3412a7de0a4a59a23dbf0242015a4b7407305096f328313896d8041491b3eff3d8a18ca56720e77767ce87554a1d62402178313c2afe4e2a892f2ab1f60ad10a2288475f85ed1d9ddc3dd7f7430076a06f02f1738dd0f1706b776b6674d5a83544b9c3a3896418e9fd92b0d8387f00bb2325bec57e4f8792f64d00e7721262ff0592830a619fb4064e00b4ba67081840817a5a0efaa878582ac2eb88206ae38e1e9b585b4c50d6b03266d3180d47b97", 0xb9, 0x880, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000000, 0x10010, r3, 0xe256a000) 00:04:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x1000000000000000) 00:04:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000800190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1737.462972][T18543] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1737.471527][T18543] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:21 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:21 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) [ 1737.558638][T18543] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1737.567080][T18543] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1737.573586][T18572] __nla_validate_parse: 26 callbacks suppressed [ 1737.573597][T18572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000900190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1737.608481][T18573] loop5: detected capacity change from 0 to 69632 [ 1737.629669][T18567] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1737.638123][T18567] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1737.660218][T18581] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1737.679411][T18567] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1737.687880][T18567] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:21 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000a00190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1737.713102][T18573] loop5: detected capacity change from 0 to 69632 [ 1737.722663][T18586] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:21 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x6000) 00:04:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/9, 0x9}, {&(0x7f0000000080)=""/27, 0x1b}], 0x2, 0xd9f, 0x2000006) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x0, 0x0) accept$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:04:21 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4a280, 0x20) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x4000000000000000) [ 1737.817062][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000b00190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000240)=""/11, 0xb}], 0x5, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) [ 1737.909290][T18604] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1737.917767][T18604] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1737.935427][T18616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000c00190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000040)={{r1}, "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"}) openat(0xffffffffffffffff, &(0x7f0000001040)='./file0\x00', 0x109802, 0x0) [ 1737.961137][T18604] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1737.969600][T18604] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000d00190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1738.032860][T18632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1738.037031][T18618] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.050516][T18618] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x11, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syncfs(r1) flistxattr(r1, 0x0, 0x0) [ 1738.079194][T18618] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.087655][T18618] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:21 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x1, 0x0, 0x4, 0x6, 0xba008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = fork() perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9, 0x40, 0x40, 0x5, 0x0, 0x8, 0x10, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffc0, 0x0, @perf_config_ext={0x8000, 0xbb8}, 0x1000, 0x9, 0x6, 0x7, 0x401, 0x3ff, 0x5, 0x0, 0x5, 0x0, 0x1}, r1, 0x3, r0, 0x0) chmod(0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x30000, 0x101) 00:04:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000e00190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1738.165640][T18605] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.174100][T18605] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1738.211117][T18605] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.219569][T18605] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283001000190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0xffffffff00000000) 00:04:22 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x2240, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = getpgid(0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x1, "8953b6666956e2fd99f4a65a4f71b406d16e9b1801a3a4cbc207c7048c05105d"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000080)={r0, r0, 0x1ff}) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000040)={0xff, @empty, 0x4e21, 0x7, 'sed\x00', 0xe1ca1608bf962ddc, 0x80000000, 0x3a}, 0x2c) [ 1738.253692][T18646] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.262148][T18646] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00007e3000/0x1000)=nil, 0x1000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={@desc={0x1, 0x0, @desc4}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000390000/0x2000)=nil, 0x2000, 0x3000008, 0x8010, r1, 0x8000000) r3 = syz_io_uring_setup(0x533, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001f7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f00001d6000/0x1000)=nil, 0x1000, 0x0, 0x4000013, r0, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index, 0x8, 0x0, 0x5428}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0xff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={0x0, 0x1, 0xffffffffffffffff, 0x1}) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x4, 0x2004, @fd_index=0x6, 0x72987ef8, &(0x7f00000000c0)="c19425bfa71ce3f87b3f14b1f4f3ec668ac803241d1f236e57e68df69622b3de9b90adc3298777583b81b75e36adff44e87d1844e40982e4d2f1179dc36eefffb30061bb33b961779127be73ecfa0b58158369fa00f7d3c0d728be62cc82c0c9bb204e521ec9ef31a59126b8b29c961f415d1a0711fdade6cf67a48c916255ee847e0af22fdd9c8ea7237f77a0177ddfebe683af2e8a64ca51b723a31423b2e8c03089ac2fcdb80a26c5a3124d29bad9b36e4e631b649332a5bc9e3b42fb7276d4cd290aaf82e56e83c839b181ee19841b4e4ee5b8f469dcac4d0e0b1750e783ee224d8612992b9feae62f810b4b13bfd4", 0xf1, 0x9}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x800}) openat2(r9, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x218501, 0xa, 0x1}, 0x18) 00:04:22 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x480, 0x1) 00:04:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283001100190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1738.375616][T18646] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.384083][T18646] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:22 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283001200190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x31b040, 0x0) flistxattr(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8804}, 0x20000015) 00:04:22 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) [ 1738.485937][T18657] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.494407][T18657] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283001400190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) madvise(&(0x7f000014d000/0x4000)=nil, 0x4000, 0x4) syz_io_uring_setup(0x150d, &(0x7f0000000040)={0x0, 0xc94c, 0x20, 0x1, 0x37b}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000230000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:22 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) [ 1738.592929][T18657] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.601402][T18657] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1738.689262][T18670] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.697721][T18670] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1738.779491][T18670] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.787994][T18670] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0xffffffffff600000) 00:04:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000043190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:22 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000080)=""/150, 0x7}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300005c190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000296000/0x4000)=nil, 0x4000, 0x0, 0x20010, r1, 0x81ad8000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x44000, 0x0) flistxattr(r2, 0x0, 0x0) [ 1738.872793][T18717] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1738.904621][T18716] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.913097][T18716] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0xc0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) [ 1738.954487][T18716] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1738.962980][T18716] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1738.963562][T18731] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:22 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/249, 0xf9}, {&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/158, 0x9e}, {&(0x7f0000000440)=""/88, 0x58}, {&(0x7f0000000140)=""/63, 0x3f}], 0x6, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x2) 00:04:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000001180)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/158, 0x9e}, {&(0x7f0000001100)=""/2, 0x2}, {&(0x7f0000001140)=""/45, 0x2d}], 0x4, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:22 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket(0x27, 0x2, 0x5) recvmmsg(r1, &(0x7f0000000700)=[{{&(0x7f0000000480)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x3}, 0x914}], 0x1, 0x40000080, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x30, r0, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000bc0)={0x0, @l2tp={0x2, 0x0, @multicast1, 0x2}, @l2tp={0x2, 0x0, @multicast2}, @can={0x1d, 0x0}, 0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)='wg0\x00', 0x1, 0x7, 0x1ff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000002c40)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r0, @ANYBLOB="04002cbd7000fddbdf25170000008c000180140002006261746164765f736c6176655f3000001400020069703667726530000000000000000000080003000500000014000200766574683000000000000000000000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000014000200766c616e3000000000000000000000004c0001800800030001000000140002006d6163767461703000000000000000000800030001000000080003000200000014000200697036746e6c30000000000000000000080003000100000044000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0800030000000000380001800800030000000000140002007767320000000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000014000180080003000200000008000300010000000c00018008000300030000002400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="561714223d9a19847d637d38f8fbdecf0e04faad7f03c0f47c4eda6872ebc803a7fdedb8375cff39ec2d69ba3cd8c03ec3415af7070202c1d84ca4ede4b1fcb500000000"], 0x1ac}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000041) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000640)=@ll={0x11, 0x17, r3, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x80, 0x0}}], 0x1, 0xf78a8edc5ea57529) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003440)={&(0x7f0000002ec0)={0x558, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff515}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x40, 0x0, 0x6}, {0x3, 0xff, 0x6, 0xfff}, {0x8, 0x7, 0x2, 0x3ffc00}, {0x101, 0x8, 0x7f, 0x1}, {0x3ff, 0x2, 0x2, 0x4}]}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x21}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x4, 0x57, 0xa4, 0x8}, {0xe78, 0xfd, 0x6}]}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3f, 0x8f, 0x0, 0x5}, {0x5, 0xcb, 0x81, 0x8}, {0x4, 0x3, 0x20, 0xe13}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x558}}, 0x20004041) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r5, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0xb0f42000) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffded65872, 0x8, &(0x7f0000002580)=[{&(0x7f00000000c0)="f180e55a492f6d0da4b3fbf61ad5c68d9bbe51537bf423051e708d33294860cb7028311aa0f028a4cf50157ea1930d", 0x2f, 0xfffffffffffff000}, {&(0x7f0000000100)="ab09265a94965fe9dd305c026a142f681207ef79042f81f090d9038481aab84507062115c441c4106f29976fe1eef0f7d9bca995338ee35581df4da4aa5585c70b65aaea9f1e82cf50da4d6222cc386be1ecfe9d8bc9f2defbbcc577fc99dc2c900a0117191a44e42aaaecaf63be254608be17a190778b2280bcf99c0d2f6c28fb13364461523f32f4166d5b3bda0dcc0aab7cdbaeb7e10a44a1ac46d6ee97d0307e54fedf8fb0a29ec45e", 0xab, 0x200}, {&(0x7f00000001c0)="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", 0xfe, 0x7}, {&(0x7f00000002c0)="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", 0x1000, 0x5}, {&(0x7f00000012c0)="ef7bb6fd7bacb6c70bc7fe8e25aa5a07b1a9132787bdc2c62d153047a883522dca4b6fcd88e159ec0699a2ed71936bfc64d59eabf22ba1212ea61a2d4d4ef4d75201432431cf60a01ecd6c5bef93d63d6a05d653bd0fef3b94ee96b56b239fb562133e7bb633cc2bf314f4c9f248f8e5bef4696828bb2d3454c4f3cae420bc0be4b1e6363780fa135b2c75be5567c2cf70723daf3a8292f2d56d6ce0744b059fc307b67dc59ec02d98899660483e573f8476d5836cf4f380e4e3d5", 0xbb, 0xffffffff80000001}, {&(0x7f0000001380)="8d4efa12fd2b0ca76d48c06f6ccad734687315d6395713386aba4d7d0d8b55317ae76525c6735467472386064463d69efc02225dce6b17e8a409c963b4508e9116e187047df1b16ea51be575219be340daf480f8c9ad59cb9a93c36a55bd50ee536d129104f006210b9ea3167617fe8b9fcd2683f9708a95abf52217b2906eac187855b575592a19dcfa4baf8d2540d3aa0d91bd0017a05cf776b892d2656cdce5f6be429658e89133dc8478d7438a73e27b97dab998c0826e20f0a5fb1247a8622256963faa57aad5fb16875f5bd157310f718104018d86559bbc462c9fa2868bfdcacd6a", 0xe5, 0x4}, {&(0x7f0000001480)="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", 0x1000, 0x5}, {&(0x7f0000002480)="06c9ebf61ec28457f6a9baf85997d77a54b65aace2cc61ee314b0ac1a7d5d1975af5a59c8fa84278b0b8ff3100e10b8d9fbc57826ecd93a71c6b6e6b7288c359b62982e8383de07520f0f9b180f029629f0705bdc4c2851d073674b952a8e360e8362d80c57989e1a5654674126302fed7462d4270682778b0894c0af712e0a0da6250b1f710f38d9c21d833a72da6736bffbf49a2c249f4da4b13e87ea0c473ecc160561860243ab44167d1479601fc68c636bf56431275aeb79de26b79740d234b6bca2be01f83e6e2b1ddfbf819396f0f7f1a4f2b2fbcbbb4", 0xda, 0x8001}], 0x2802808, &(0x7f0000002640)=ANY=[@ANYBLOB="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"]) preadv(r6, &(0x7f0000002a40)=[{&(0x7f0000002780)=""/97, 0x61}, {&(0x7f0000002800)=""/147, 0x93}, {&(0x7f00000028c0)=""/184, 0xb8}, {&(0x7f0000002980)=""/67, 0x43}, {&(0x7f0000002a00)=""/9, 0x9}], 0x5, 0x4c15, 0x6) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002ac0), 0x400000, 0x0) open(&(0x7f0000002b40)='./file0\x00', 0x200000, 0x80) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002b80), 0x608000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000002bc0)={0x0, 0x0, 0x1, 0x8, 0x0, 0x4e80}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r7, 0x8040942d, &(0x7f0000002b00)) [ 1739.051525][T18716] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.060003][T18716] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1739.099246][T18716] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.107715][T18716] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000013c0)='./file1\x00', &(0x7f0000001400), 0x204040, &(0x7f0000001440)=ANY=[@ANYBLOB='trans=I,rfdno=', @ANYRESDEC, @ANYRES64, @ANYBLOB="26c3697beda484fd088ce0e9c11bd0a9f7ba6f02872fd6489f942b2185360419b4a666307885e01fac51131218da91f7b0f9ff56d56cae35c8ea8dbe1c31a75954e816eb596543210b27ae1089738dd89064b7ad730e17f5a60ba7d7030ce90b7a407bd48193ee9964276694a2002d664ca0fadd66fac0bdd5511f0d30854d7548fb5429c6fc6dd7089966100e1c9b5dfa3c178bccf8009dce15806f96", @ANYBLOB=',version=9p2000.u,cache=none,dont_measure,measure,uid=', @ANYRESDEC=0xee01, @ANYRES64]) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) gettid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c046f81b89cfb", @ANYRESHEX=r2, @ANYBLOB=',fscache,loose,smackfshat=,smackfstransmute=trans=fd,,fscontext=unconfined_u,smackfsdef=)(&,fsname=version=9p2000.u,uid>', @ANYRESDEC=r4, @ANYBLOB="2c00418b0def888749d3452c40f0"]) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x480, 0x7}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/181, 0xb5}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000280)=""/73, 0x49}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x6, 0x9, 0x101) 00:04:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004000a0009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x802, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r1) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r1, 0x2ce65000) flistxattr(r0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x880000, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_mmap}], [{@dont_hash}, {@euid_lt={'euid<', r4}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, '\x06'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}}) 00:04:22 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume_offset', 0x600, 0x6) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d7297e20f1daa2fdb06982f6cda93f53265f12a460900aedc113ca23b4a663fe64c161ceb72e6582802b953ed4a050f51b1b75e15a7a77cc88e9cf45bcd9083979a068ba3bbe3e4264d63463485ff48c75402ca2e31bdb8dff4295324c5abcd8d55b3dfbffad072f2785a3f1083cc3bce369f2045a090a37f08214311cb0ff693cb89288d7dec84fbc4fc97aa514fca29a373db59a3e1e16cff03fd36053c", @ANYRESHEX, @ANYBLOB=',cache=loose,hash,\x00']) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40f202, 0x54) name_to_handle_at(r0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x2, 0xfffffffd, 0x8, 0x6}, {0x2, 0xa0, 0x3, 0x10001}}}, &(0x7f0000000500), 0x400) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x9c, 0x15, 0x400, 0x70bd2c, 0x25dfdbfe, {0xc}, [@generic="f78af2acd1469f4fc7080a552e6341a138f24a3d322eec0246c8d10763fe2e3d96ae1f52d39b9818962b4fd48f3240095ac1baa8ff99cd3bef1364c93a13d223ac775928b0aa69f98a7b65c412b58d152beb5ccbabd6605a4243a6cca0d15ccec473aae08aa28b6e64e34cee60200a01f979f97160191975110d384f0beb5ce5f6f0", @typed={0x4, 0x5e}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000000) [ 1739.146007][T18747] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.154583][T18747] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400180009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1739.193403][T18747] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.201872][T18747] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1739.232208][T18747] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x4]}, 0x8, 0x40000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) [ 1739.240656][T18747] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000402190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:23 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/devlink', 0x400800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r2, 0xfeb, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000000c0)={0x1150, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf7d, 0x28}}}}, [@NL80211_ATTR_IE_PROBE_RESP={0x2d2, 0x7f, [@fast_bss_trans={0x37, 0x12c, {0x6, 0x9, "cb6fa06178853d3e0740289a86678b69", "868738ce9ca6b2d3f75bfc28a2a99bb306edb609aa0ed41fdf6bbcd8cd079304", "e8a4170ec835d82a3d28b7479d03af3ba50b86877a1c659ac351e708ed95211e", [{0x3, 0x18, "3f73c9f5ccd01a0af4eba9a75aafd8d0929ef1eb56a4b5e2"}, {0x4, 0x24, "446f9595b02a10aeac4edea344a5372040b7fd8d523240e2c31b098aed9b7ac9cf3bacb4"}, {0x4, 0x14, "edd45931e43eebee405ea256b1fdf133ba7f0495"}, {0x3, 0x6, "f0160e487d5d"}, {0x2, 0x25, "51f67f766d3f2e23aba0a2aa7c6b0029376d6e6ef8a5cd1f38b4174272987da6a23245dd60"}, {0x2, 0x26, "4f94ce7173ab69e178bb2c6da899976ffd150ae2803597388433b2a6e0fa47666fab672e54b6"}, {0x2, 0x1, "ca"}, {0x4, 0x5, "588b7e70c6"}, {0x1, 0x21, "326c1d5f1bbe627f82b4921956a08381f89c5970c4005af5debe551942295c441c"}]}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x81, 0x1}}, @fast_bss_trans={0x37, 0x6b, {0x4, 0x1, "241f5a75c2feecee5d2bab3185c77244", "d210abceee56d777dd0c0419d25be2771ea4d47cf383d22ece0a8f6add7cfe05", "01a46c4a1a9c9f001ae435754219c5f3f5fb117321d24d47da3b49d644926dbb", [{0x4, 0x17, "14650e3f469e3fdd1d92e0bfce8f879d5e046c15e275e5"}]}}, @cf={0x4, 0x6, {0x5, 0x8, 0x20}}, @chsw_timing={0x68, 0x4, {0x2, 0x1ff}}, @channel_switch={0x25, 0x3, {0x1, 0xb9}}, @tim={0x5, 0xf6, {0x7f, 0xda, 0x4, "832fc009747bddf5c4fb1a60b361e394c7ff2717493cb0d8fe89f0bc71aa7e6a0e943ba8d24b72e337392c1a150f46ad8e7fb5ad3369b61346dc55794f7150b44f470f7b9ce0934db7e005439fae1a6d05e08510c801d072d6bc80fc1d97882a7c54ed02a3429802c66bc2fcf8bc4da19acafd6c90246c8377c199bbf26f86071dbc10bce0c89a1f30ef3fe614ead84bb406c263f5f3ce20e5545d933d3abf21a10b2087c132d3cb5e5a9cf00e086dfb8085e0f6f295b54a8c8b024c8f56ec65103e68489a49a48576bd0561f82dd9028667e659564ac16f5f816dbfd3163852d0e91d67db711b7776ffca2872b539eed34fc2"}}, @dsss={0x3, 0x1, 0x28}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x66e, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x270, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x54, 0xf, [@perr={0x84, 0x4e, {0x1, 0x4, [@ext={{}, @device_b, 0x4, @device_b, 0x21}, @ext={{}, @device_b, 0x8001, @broadcast, 0x27}, @ext={{}, @device_b, 0x19c1, @device_a, 0x10}, @ext={{}, @broadcast, 0x6, @device_a, 0x19}]}}]}, @NL80211_ATTR_PROBE_RESP={0x51f, 0x91, "cad1dc505f651e308958c28379f59f077306d40140d08950dcc21d1e9d9abb205582ae39404e5f85acdf69eb9933364665c65603a888c0331588c87aecd3b905563faf0acd0b632c993e200ecc0f79f8891b362568ac27bba801a5cdcba1999711c8de21a2845f639e03ea2327dc7a719b8a7b9da5269a740ac5d34b9cd5d2f16f98fa54f82895e1a62b5ab7967896f2b162e7eaf4b4b84aa793aadcec1a515637432e465349d1649ab57921c17ae618bde0b1caf8acfb1be8a97a7c73e117ee0849c46ad47d1ba00f3fe8d1341e6326c2d0c8be4d05b4e5140b09cd4401135fadefb0adf4479739b5f6903c45434698c211671b732718dfbf7a951d126147a3c3de79ac6b617846d10739b24ea95f3bbb2c55c5205e6c63a4c191239dc4e7ca89cfd524489ef907f716d9437ccdd75d3549a2e856849e6fc698f188d7fea2a693a20e8d815e10682609405924a0b971fa8af35cdd37bb3a42e49b9bf74f35733793eae423e0bec554cbb52cd4564e630720ac4a35418ec0f5a9749065afddcfe5af3a67d17d402f742010859399350c4a6f60696aed335c3c9194e1252b4d8e0794b14f30320725c5ad71a3caea0395f3d882e685e4815a01c1cad6a6f9b41bd875f75c5564f7c249a6a24054e9685322e7bcaf11a3fb8bdee75f9e5ef09173e124851bc2bfb44b986c1d33cc782a7f0d981159bddb30cd7860a22029ee360b51e6d5cb4d8799e09bd0c243b924a31bb72782f8bd25c9ae7ed0315111db6efc800d68ed08c01fe878df12d786c5500ac7847a01dfa6e5baddfb58750e76f57ab9932f1761b023a51c2a3e6a1df8d743a89b5c9fd5889b73ada535d3f35b678343d6db52c2fc674493056714909657a97a0b952ab4ad309a8872ea52c78f77a3e6b55aec9995c73b9f5f940dc49bf643963cb2e2ef91b155b73c9afc594d9f8b4cfa792e74cd1acc9b5c9f60f09f23d7a93eb91afc57edb0276b7a3d456382145dd1f9246ae4481f5dece4f2b3216a50a654139d82f0d901871cf13f1526dad8eb1c3cb5d8a785a1b7399ef516f4e243d5c80f7ad07b095bde43490a4d1dcf62c23cdf64a28e40ca82f281649b1006f4eb03b1cd7848a38189164d3524d112ab647b925775d8c6d8ed67a2666f750231cc49cbb5f3bda534f382ac57d89925fefa77316f4877e09bb16d389db8550eb88c20aea23f798fe31fb14751cc659b9a222148c8004ecf6d7ae657837c529723af989cfcb12e5f0c06242905d97860e0794f30ddc8aeb527b161b567209eecaded899db07138048dd390e86c0c664289e5a5ca3440fffad75ff896be9c12be99163f57576530085db036f797b026125b6b9422ddfbba1d427cdc974f9394c78a35091c2f66f9a43dc8d27d49a291f15000e0bce41bc21f4d2198a285d84a3325474c85a6a30b03c1334b1bc3216482ead787183facd8a0cf0950e613f550b2c23b4423644924e8418c4dc9285d502bdf69e35f06316f0bec272b56a11f8c243493212ba4fa7164a5bf4d05005600e8e35652658e74a8083ea010b579d0031933960bd0ef4a784459fb548e618cef605f9e61ecfc2ad85a2bb3e1f401756f8053c2a41a06edc9fc4e3eac37695feb4f18301786a4bcd016d8eb18fbafca2a832765f3500f84ae69922309d7c4dd1519a6401ca1ff6095dd21b712fb0564e3aaea244244a0bcdc72a77d94cb8a1a04950270f2921954cd759b63184b882d07cf8d6600bed68b2b55a5b5662f5edf0b37ae3f8ff6b5c52d34449d5ddf41e598d4878cb2c3ab76cd18d68abc94fbd278d68020c17bfa74bed89f1ed3ac0b62453c2c2891a215969a88c73a848d"}]}, 0x1150}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) shmget$private(0x0, 0x1000, 0x2, &(0x7f00003bc000/0x1000)=nil) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r5, 0x0, 0x0) 00:04:23 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000007002e2f66696c6530000000"], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88000, 0x168) flistxattr(r0, 0x0, 0x0) 00:04:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) [ 1739.291899][T18747] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.300380][T18747] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:23 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x20, 0x5c) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) chmod(0x0, 0x0) 00:04:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000403190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/211, 0xd3}, {&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f0000000200)=""/189, 0xbd}], 0x3, 0x8001, 0x5) flistxattr(r0, 0x0, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/177, 0xb1}, {&(0x7f00000003c0)=""/49, 0x31}], 0x2) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x448001, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000680)={0x0, 0xf2af72e4b7bec3e2, 0x6e, 0x3, @buffer={0x0, 0x39, &(0x7f0000000080)=""/57}, &(0x7f0000000540)="3dd536d7323f4ed9e487a450e2204ac9dca4b1bf992c9f401d4ff2d39c717ef013ca25e4ccc4140f70da7a3424f920328ba728b9a195d7349ff883328885f75fe645dc1b4d03d789503e64bdadb3124c17c4fd8e3e8026317b755fa14a75df435a886f8408883d8f13ed6a3a64cb", &(0x7f00000005c0)=""/142, 0x0, 0x0, 0x2, &(0x7f00000000c0)}) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) close(r0) [ 1739.353535][T18812] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:04:23 executing program 5: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xc200, 0x40) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7800001, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x81, 0x4000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000100)={0x4}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$cont(0x7, r3, 0x1, 0x200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="66530700ae897094e7b126b097eaa76934f10000000000007d114b654b499374a8db38f800000002003de97e99d977d7d7e37ee9a29cb5a3713cf1db65205cb896ab055703950820d420c406b33e0aad08394bdde35dbf95340304ecf9297ade47d4a78041f1aec78f", 0x69}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r4, 0x0, 0x0) 00:04:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x24000010) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x105004, 0x39) flistxattr(r1, 0x0, 0x0) 00:04:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{}, {}, {}, {0x20, '{*]{$,/%,##]/%*[.:'}, {0x20, '$+@,'}, {0x20, '@0-%@j'}], 0xa, "6c50ac075e7684a7241207ea7fe40fea5ee850f146fb386fdc5307f0d2abe2010d5ef512a2aefc208dcaaf2c07169eb6ee2c04e2cd60bbc9cea331c0ca55a73dd4c28e7e254fa88be37f76ad711b3c4dce6ab9900fb0d92078614c914a32eb346ae3686831b11a7dca716ebce7f706db6d6d41bb38ed47ca6d1701ec5a9d5a42e2a783c3caab7423e584dbf5e7ece3fcc824ec9a6eebde1c519bd3d209ee720cbe2a12b72bc06d7178176143f9c1766011c507e94f356a5f0b81d03735936ed78cbb4ff4315c452fb434a8683ea89d2faea5959c88691ce20c679114916decf861d9add55037034c37367ceedb6a1e7f64ada14bded53f2b"}, 0x125) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x22001, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) fstat(r1, &(0x7f0000000280)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x400000, 0x8a) flistxattr(r1, 0x0, 0x0) [ 1739.438240][T18820] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.445137][T18836] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1739.446692][T18820] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1739.465815][T18820] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.475803][T18820] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f000077b000/0x2000)=nil, 0x2000, 0xa, 0x30, r0, 0x458d7000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) 00:04:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000040)=""/75, 0x4b}, {&(0x7f0000000200)=""/211, 0xd3}, {&(0x7f00000000c0)=""/88, 0x58}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000000400)=""/93, 0x5d}, {&(0x7f0000000480)=""/89, 0x59}, {&(0x7f0000000500)=""/238, 0xee}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/196, 0xc4}], 0xa, 0x8, 0x5) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:23 executing program 0: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) flistxattr(r0, 0x0, 0x7) [ 1739.560375][T18827] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.568863][T18827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1739.610896][T18827] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.619396][T18827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1739.649011][T18864] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.657480][T18864] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1739.674010][T18864] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.682578][T18864] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1739.698603][T18827] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.707027][T18827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1739.723220][T18827] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.731792][T18827] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1739.751055][T18864] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:23 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/bus/mdio_bus', 0x400100, 0x8) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000680)={0x5b2, 0x9, 0x85}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0xbe, {{0xa, 0x4e20, 0x7, @mcast1, 0xbc}}, {{0xa, 0x4e20, 0x79, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xec}}}, 0x108) chmod(0x0, 0x0) stat(&(0x7f0000000580)='.\x00', &(0x7f00000005c0)) 00:04:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) fcntl$addseals(r2, 0x409, 0x8) flistxattr(r1, 0x0, 0x0) 00:04:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000404190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') [ 1739.759658][T18864] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1739.798480][T18864] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000405190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r2, r3/1000+60000}, {0x77359400}}) flistxattr(r1, 0x0, 0x0) [ 1739.806997][T18864] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x79, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xdc07}, 0x0, 0x5, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x180, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4, 0xfd, 0x81, 0x20, 0x0, 0xcf9, 0x10, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000140), 0x4}, 0x40200, 0x250a57db, 0x80, 0x1, 0x3, 0x1f, 0x7, 0x0, 0x9e9e}, r2, 0x3, r3, 0x2) truncate(0x0, 0x0) r4 = pidfd_getfd(r0, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x8, 0x2, 0x2, 0x7, 0x0, 0x5, 0x800, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x376184ee, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x40, 0x7, 0x80000000, 0x8, 0x3, 0x1ff, 0x1000, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x3, r4, 0x0) 00:04:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x101040, 0x1) syncfs(0xffffffffffffffff) flistxattr(r3, 0x0, 0x0) 00:04:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000406190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x30) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) r7 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f000005bf80)={r6, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000051a00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000000a40)={0x80000000, [{r10, r12}, {r4, r8}, {r11, r12}, {r4, r12}, {r9, r12}, {r4, r8}, {r4, r8}, {r9, r8}, {r4, r12}, {0x0, r6}, {r10, r6}, {0x0, r8}, {0x0, r6}, {r5, r8}, {0x0, r12}, {0x0, r12}, {r4, r8}, {r11, r8}, {0x0, r12}, {r5, r8}, {r10, r8}, {r10, r12}, {r9, r8}, {r4, r8}, {r4, r6}, {r4, r8}, {r4, r12}, {r10, r12}, {r4, r8}, {r11, r6}, {r11, r12}, {r5, r8}, {r5, r12}, {r10, r8}, {r10}, {r10, r6}, {r5, r6}, {r5, r8}, {r4, r8}, {r5, r6}, {r9, r6}, {r5, r8}, {r11, r12}, {r5, r8}, {r11, r6}, {r9, r12}, {r4, r12}, {r5, r6}, {r10, r6}, {r5, r8}, {r4, r12}, {r11}, {r5, r12}, {r9, r8}, {r9, r12}, {0x0, r8}, {r10, r6}, {0x0, r12}, {r10, r8}, {r4, r12}, {r5, r6}, {r11, r8}, {0x0, r6}, {0x0, r12}, {0x0, r8}, {}, {r10}, {r4, r8}, {r9}, {r9, r8}, {r10}, {r11, r12}, {r5, r6}, {r9, r6}, {0x0, r12}, {r9}, {r9, r8}, {r5, r12}, {r10, r6}, {r11, r12}, {r4, r8}, {r10, r12}, {r5, r8}, {0x0, r8}, {r11, r8}, {r5}, {r10, r12}, {r10, r8}, {r4, r8}, {r10, r8}, {r9, 0x0}, {r10, r6}, {r10, r12}, {r10, r6}, {r5, r12}, {r11, r8}, {r9, r12}, {r5, r6}, {r4}, {r11, r6}, {r5, r8}, {}, {0x0, r8}, {r4, r6}, {r5, r12}, {r5, r6}, {r10, r8}, {r4, r12}, {r11, r8}, {r5, r6}, {r10, r8}, {r9, r6}, {r11, r6}, {r4, r6}, {r4, r8}, {r4, r6}, {r10, r8}, {r10, r12}, {r9, r12}, {r9, r6}, {r11, r12}, {r10, r12}, {r5, r12}, {r11, r8}, {r9, r12}, {r9, r12}, {r11, r8}, {r5, r6}, {0x0, r12}, {r9, r8}, {r10}, {}, {r4, r8}, {r9, r6}, {r11, r6}, {r4, r12}, {r11, r12}, {r9, r12}, {r9, r8}, {0x0, r8}, {r5, r6}, {r4, r12}, {r5, r12}, {r5, r6}, {r9, r6}, {r5, r12}, {r11, r6}, {r5, r6}, {r10, r8}, {r4, r8}, {}, {r11, r8}, {r4}, {r9, r12}, {r11}, {0x0, r12}, {r9, r6}, {r9, r6}, {r9, r6}, {r4, r6}, {r5, r12}, {r4}, {r10, r8}, {r10, r6}, {r9}, {r9}, {r4, r8}, {r5}, {r4, r12}, {r4, r6}, {r10, r6}, {r11, r12}, {r5, r8}, {r11, r6}, {r9, r6}, {r9, r12}, {r4, r12}, {r10, r8}, {r4, r12}, {r4, r12}, {0x0, r8}, {0x0, r6}, {r5, r12}, {0x0, r8}, {r4, r12}, {r4, r6}, {r5}, {r11, r8}, {r11, r6}, {r10, r12}, {r11, r12}, {r11, r12}, {r11, r6}, {r5, r6}, {r5, r8}, {r5, r12}, {r4, r12}, {r11, r6}, {r5, r8}, {r4, r12}, {r4, r12}, {r9, r12}, {r4, r8}, {r10, r6}, {r4, r12}, {r11, r12}, {r10, r12}, {r5, r12}, {r11, r8}, {r5, r8}, {r11, r6}, {r11, r6}, {0x0, r12}, {r11, r8}, {r5, r6}, {0x0, r8}, {0x0, r8}, {r9, r6}, {0x0, r6}, {r5, r6}, {r10}, {r4, r12}, {r11, r12}, {r9, r6}, {r4, r12}, {r4, r6}, {r4}, {0x0, r6}, {r10, r12}, {r5, r6}, {r11, r8}, {r5, r8}, {r11, r8}, {r4, r12}, {r9, r6}, {r9, r6}, {r11, r6}, {r4}, {r5}, {r9, r8}, {r11}, {r4, r6}, {r10}, {r11, r6}, {r5, r12}, {r11, r12}, {r10, r8}, {0x0, r6}, {r9, r6}, {r11, r8}, {r4, r12}, {r11, r6}, {r4, r8}, {0x0, r6}, {r9, r12}], 0x40, "7d20bc90d7c389"}) r15 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r15, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) socket$inet6(0xa, 0x3, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cf80)={0xff, [{}, {0x0, r6}, {r4}, {r5, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r4, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {r5, r6}, {r5}, {}, {}, {r5}, {r5, r6}, {}, {}, {r4}, {r4}, {0x0, r6}, {r5}, {r4}, {r5, r6}, {r4, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r5, r6}, {}, {}, {0x0, r6}, {r5}, {r5}, {}, {}, {}, {0x0, r6}, {}, {r5}, {r5, r6}, {}, {r5, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {r5}, {}, {r5}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {0x0, r6}, {r4, r6}, {}, {r4, r6}, {0x0, r6}, {r4, r6}, {r4, r6}, {}, {r4}, {0x0, r6}, {}, {}, {r4, r6}, {r5}, {}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {r5, r6}, {}, {r5, r6}, {r5}, {}, {r10}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {r4, r6}, {r5}, {0x0, r6}, {r4, r6}, {r4}, {r4}, {r5}, {}, {}, {}, {r4, r6}, {r4, r6}, {}, {0x0, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r4}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r5}, {}, {r5, r6}, {}, {0x0, r6}, {r9}, {r4, r6}, {r5}, {r4, r6}, {}, {r4, r6}, {r5, 0x0}, {r5}, {r4}, {}, {0x0, r6}, {}, {r4, r6}, {r4}, {}, {0x0, r6}, {}, {}, {r4, r6}, {r4}, {r4, r6}, {r4, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r5}, {}, {}, {r4, r6}, {r4}, {}, {r4, r6}, {0x0, r6}, {r4}, {}, {0x0, r6}, {}, {}, {}, {0x0, r6}, {r4}, {r4}, {}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {r5}, {r5}, {}, {0x0, r6}, {}, {}, {r4, r6}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {r4}, {}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r4}, {r5, r6}, {0x0, r6}, {r5}, {r4}, {r5}, {r4}, {r5}, {r5, r6}, {r4, r6}, {0x0, r12}, {0x0, r6}, {}, {r5}, {}, {r4}, {0x0, r6}, {r4}, {r4, r6}, {}, {r5}, {}, {}, {0x0, r13}, {}, {}, {0x0, r6}, {r4}, {}, {r5}, {}, {}, {0x0, r6}, {}, {}, {r4}, {r9, r12}], 0x0, "47e9f264f8efb3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {r5}, {r4, r6}, {}, {}, {r5, r6}, {r5}, {r5}, {}, {0x0, r6}, {r4}, {}, {}, {}, {r5}, {}, {r5}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {r4, r6}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {r4}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {r5, r6}, {0x0, r14}, {r4, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r4}, {}, {}, {}, {r4, r6}, {}, {r5}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {r5}, {}, {}, {r4}, {}, {r5}, {}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r5, r6}, {}, {r5}, {}, {0x0, r6}, {r5}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {r5}, {}, {}, {r4}, {}, {}, {}, {}, {r5}, {r16}, {r5}, {0x0, r6}, {}, {}, {}, {}, {r4}, {r4, r6}, {}, {}, {r5}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4}, {}, {}, {0x0, r6}, {}, {0x0, r17}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {r5}, {r4}, {r4}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {0x0, r18}, {r4}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}], 0x3f, "4c90a69153a80f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYBLOB="649e000000000000001000000000000000000080000000000100008000000000f7ffffffffffffff00000000000000005b000000b677ffff018000000010000000000000000000000400000000000000000000000000300007000000000000001800000000000000000000000000000000000000000000000000000000000000e22e3736f338c3ff6271150cfc3b5fec01da919fb36065e3eb093e0dbfca6ed9b0029b39977a"]) flistxattr(r0, 0x0, 0x0) [ 1739.853168][T18882] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.861640][T18882] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000407190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1739.925219][ C0] sd 0:0:1:0: [sg0] tag#5222 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1739.932077][T18882] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1739.935601][ C0] sd 0:0:1:0: [sg0] tag#5222 CDB: opcode=0xe5 (vendor) [ 1739.943995][T18882] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1739.950849][ C0] sd 0:0:1:0: [sg0] tag#5222 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1739.971659][ C0] sd 0:0:1:0: [sg0] tag#5222 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1739.981233][ C0] sd 0:0:1:0: [sg0] tag#5222 CDB[20]: ba [ 1740.008820][T18882] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.017247][T18882] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.034620][ C0] sd 0:0:1:0: [sg0] tag#5223 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1740.044990][ C0] sd 0:0:1:0: [sg0] tag#5223 CDB: opcode=0xe5 (vendor) [ 1740.051859][ C0] sd 0:0:1:0: [sg0] tag#5223 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1740.056300][T18882] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:23 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) vmsplice(r0, &(0x7f0000000540)=[{&(0x7f0000000040)="e418ea68ef0822fc5cb43053a18ead70a7be96065baef94aca3ae47f9963e6597ba652313f495e7f538cf47a37f5ab305f68aeca3432bfd2069d15885d85648d120b6000c0ba6ec21db7d602789aae", 0x4f}, {&(0x7f0000000200)="d309db591a33af90ea3c5f0326715a85dba66f803005fdec711d58f39d6cbb0c3c374683ae8a383f77e870899951ec0da007921105451834dac7afd26074c2f5da878b7d8531e244b600e050c292ccae35cf8910a9ca10b4a684c342ca132690b79df62152104638e37a9e60149d7a45a6b0f2bcd28001349f8f7fc13fc947b3908b82e3316d60875b7cfbca89e69c1a3cf4bbc5ad5cc6dc448cc65797ca35d065efa79c825f83465f857947cc88cc86c376ff6d66992bad3942996c89c170e14e491e5f30af00ab0689c980ef953a83330cb0ef7c3493b349748e39aaddbc539196393d0f155cfab5f9", 0xea}, {&(0x7f00000000c0)="2914449f27e0510779c5f938eb878ea2f46b9211911c0bb471a591787ea87544ebc175e30bed99c24380648d25ce56604440e1c8392f88401279", 0x3a}, {&(0x7f0000000100)="bd98414d64a3cd298c7318d9256035015398bbf5effad171c2a53793add7709a818e68a85909e287126ce3a5e05fdf34cbdd2ade41de07871ef1108c3977abfa2fe7288f8711ceeb683355e4f82b167e19f0c47dd2719323b099650cf0e70df85eb20ea6b7", 0x65}, {&(0x7f0000000300)="1ba0232f7ed5d1d18216cdf4d6bf82eb479353eba448e1749ca574ed7b1587f2786b62ba0c46eebd88fa3ff452e5ceb2609c", 0x32}, {&(0x7f0000000340)="82387f51173db35b271158137ac492e6c031c70d8741996c77abe7cb15e134fffbe941f63c1d89ded9b7ad1d000c2c516595a4c1b0d58e10f012d687646994dee01104ed6ede870c55fa019a3f071126d6e41a0c55e6eca9577c3ebae7e38c7e65e42789b5afdbea921307828e07939e6ec9ba5b69c9a1b5126d015c4b461e763be89386b726cd004ffa922b3167544b83dae8352fd39b922c12bee12da09336ca9c3f37f24e84631c8476084ff60e79aa9404eecc53e49bc448146f16be8e236f148707b241b18a73782635b6de7e41cbaebccb", 0xd4}, {&(0x7f0000000440)="9b92be3fb0a1d1067434d6b22245a899a30c8e0bfbf05d64a04acda5b666b89a7d32b37d14cb7ca8f3f0c08d1e9d97ba3af895c16f321c685c7312b84191e18466ebb2943b44e8251a423c2d92966edeb3a86b67ad7971a7114388b0998e07525a43c85f4aa05f9072b1eb0eec8d38a114d4671144eefe95421823aa71772f4e695b9f1960caee08bd2c5fad9bfceb216fdc642c2d361b7740c7da736034926c2e7b294d4592a3648d5467b32f9593dee6543a4d5363c40b17af27702129ac925f12e1179de0a20de5c301825e791b9510", 0xd1}], 0x7, 0x0) 00:04:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x200000, 0x3) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x1c0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x40, 0x7f, 0x9, 0x0, 0x0, 0x2, 0x100, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0xc72ef2620c37bdde, @perf_bp={&(0x7f0000000040), 0x8}, 0x2, 0x3, 0x1f, 0x3, 0x80000001, 0x81e, 0x3, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r0, 0xb) 00:04:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x420000, 0x146) mmap(&(0x7f0000174000/0xc00000)=nil, 0xc00000, 0x3000009, 0x110, 0xffffffffffffffff, 0x14284000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000408190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1740.061420][ C0] sd 0:0:1:0: [sg0] tag#5223 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1740.069809][T18882] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.090649][ C0] sd 0:0:1:0: [sg0] tag#5223 CDB[20]: ba [ 1740.118533][ C0] sd 0:0:1:0: [sg0] tag#5224 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1740.128922][ C0] sd 0:0:1:0: [sg0] tag#5224 CDB: opcode=0xe5 (vendor) [ 1740.135790][ C0] sd 0:0:1:0: [sg0] tag#5224 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1740.145019][T18933] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.145373][ C0] sd 0:0:1:0: [sg0] tag#5224 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 00:04:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x200100, 0x60) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x109000, 0x10) flistxattr(r1, 0x0, 0x0) mmap(&(0x7f000050e000/0x1000)=nil, 0x1000, 0x1000000, 0x80112, r2, 0x79925000) 00:04:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) ftruncate(r0, 0xb1) open(&(0x7f0000000040)='./file0\x00', 0x2502c0, 0x80) [ 1740.153751][T18933] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.163283][ C0] sd 0:0:1:0: [sg0] tag#5224 CDB[20]: ba [ 1740.205500][ C0] sd 0:0:1:0: [sg0] tag#5225 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 00:04:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000409190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000080)) 00:04:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001, 0x10, r0, 0x67cbb000) flistxattr(r0, 0x0, 0x0) [ 1740.215877][ C0] sd 0:0:1:0: [sg0] tag#5225 CDB: opcode=0xe5 (vendor) [ 1740.217380][T18933] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.222758][ C0] sd 0:0:1:0: [sg0] tag#5225 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1740.231160][T18933] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.252129][ C0] sd 0:0:1:0: [sg0] tag#5225 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1740.261726][ C0] sd 0:0:1:0: [sg0] tag#5225 CDB[20]: ba 00:04:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040a190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x24e7, &(0x7f0000000040)={0x0, 0x226c, 0x10, 0x2, 0x281}, &(0x7f0000354000/0x1000)=nil, &(0x7f0000488000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0xd90, &(0x7f0000000140)={0x0, 0x7266, 0x1, 0x2, 0x398, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f00002c5000/0x800000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x1}, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r3, 0x0, 0x0) 00:04:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000200)=0x2) chmod(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1f, 0xfd, 0x20, 0x1, 0x0, 0x5, 0x90009, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x41002, 0x1, 0x4, 0x9, 0x5, 0xce7, 0x5, 0x0, 0x1ff, 0x0, 0x7fffffff}, r2, 0x8, r1, 0x3) [ 1740.315530][T18930] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.323998][T18930] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) [ 1740.366311][T18930] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.374784][T18930] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x401, 0x3, &(0x7f0000000280)=[{&(0x7f0000000100), 0x0, 0x15}, {&(0x7f0000000200)="cb43a2aa6f0df6f24d6fac0dd89bab08f8a67a795c1248330441d1c119ef8cd983207887a8ccc3ac931a0dc74a2b1a25dfa397b8154ac64c0cf9093dff476dae004e544b88b49917194aee852f76aed814f0f8ad451ba36b773213c173ddba25cf2a553777082e6de3fe8b7ea4cf652be8ed162b262a6f1b8475c828", 0x7c, 0x437}, {&(0x7f0000000140)="4012fe4a6f585b898988921466f910b40ff4", 0x12}], 0x1820054, &(0x7f0000000300)={[{@nonumtail}, {@numtail}, {@uni_xlateno}], [{@fowner_lt={'fowner<', 0xee01}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000400)={{}, {r1, r2/1000+10000}}) 00:04:24 executing program 0: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x4f24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, 0x88) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) preadv(r0, &(0x7f0000001180)=[{&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000180)=""/4096, 0x1000}], 0x3, 0xffffffff, 0xfff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, r0, 0xe7f8000) 00:04:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040b190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) mmap(&(0x7f0000562000/0x2000)=nil, 0x2000, 0x0, 0x20010, r2, 0xe2bf6000) [ 1740.431088][T18930] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.439588][T18930] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.458066][T18930] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.466586][T18930] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:24 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000200)=@nfs={0x90, 0x24, {0xfffffffe, 0x7, 0x1f, 0x80, "d75c72397d4dab1678b8a8653b50c4f12db702f9f57b1ec96a24b5e628b191bbecbc02d096b059c853e13f85fb753b5e95f8f2bf5c89ffe2ad4976521c13ad5d013aec52bca4b744a2a2a370b76c17bf24d2908fe51e361db03971624550514cab7c4e04db5acd57c689584e6486a1fcc1f82929e13cb914d355496df1ada9fd"}}, 0x20800) 00:04:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040c190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x4010, r0, 0x1734d000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x422181, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000040)={[0x8001]}, 0x8, 0x800) openat(r1, &(0x7f0000000080)='./file0\x00', 0x82000, 0x98) 00:04:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getdents64(r1, &(0x7f0000000040)=""/14, 0xe) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) 00:04:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040d190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1740.556799][T18993] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.565408][T18993] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.580278][T19001] loop4: detected capacity change from 0 to 4 00:04:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040e190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/177, 0xb1}, {&(0x7f0000000140)=""/130, 0x82}, {&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x4, 0xff, 0x5) [ 1740.612840][T18993] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.621301][T18993] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.660937][T19004] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.669397][T19004] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.709283][T19004] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.717753][T19004] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.738123][T18983] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.746689][T18983] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.762654][T18983] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.771148][T18983] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.787606][T19001] loop4: detected capacity change from 0 to 4 00:04:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000410190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000407000/0x4000)=nil, 0x4000, 0x300000e, 0x8010, r0, 0xb5c46000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) flistxattr(r1, 0x0, 0xffffffffffffff6c) 00:04:24 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x20800) 00:04:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) r3 = open(&(0x7f0000000040)='./file0\x00', 0x408000, 0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(r2, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0xfffff000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00003d1000/0x4000)=nil, 0x4000, 0x2000006, 0x8030, r5, 0x32054000) r6 = openat(r4, &(0x7f0000000080)='./file0\x00', 0x0, 0x120) r7 = openat2(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x80, 0x56, 0x6}, 0x18) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x100010, r7, 0xe0290000) flistxattr(r6, 0x0, 0x0) dup3(r4, r0, 0x80000) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140098072500010025bd7000fbdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000000c0)=""/5) 00:04:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) mmap(&(0x7f000024e000/0x3000)=nil, 0x3000, 0x2000002, 0x10, r2, 0xabdf2000) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x1, 0x7, 0x1, 0x0, 0x8, 0x4022, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x444e, 0x4, @perf_config_ext={0x5, 0x2a}, 0x1000, 0x6, 0x22b, 0x2, 0x1, 0x869c2a43, 0x2, 0x0, 0xffc3, 0x0, 0x1}, r1, 0x2, r2, 0xa) truncate(0x0, 0x0) 00:04:24 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc09}, 0x0, 0x0, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0xda8}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) [ 1740.843321][T18983] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.851894][T18983] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1740.867460][T18983] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.875870][T18983] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1c1) flistxattr(r0, 0x0, 0x0) 00:04:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_complete(0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x4000, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) 00:04:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000411190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) chmod(0x0, 0x0) ioctl(r0, 0x4, &(0x7f0000000040)="9f6f6d20406d6d2939ca6d37b35cb121e45d6377f252c3ec63e3974bfbf2cae8142254e72b5451b03834f14001c2dfbfbd47c6aa323e2d716b9511fc50454a0662b7b8ca3c05732e8327d670d8e4d93e9c20ef4151a4ba244d824e5345d23710b4bcbb2958cb706d702c0a1289a063fecb39d861dbb39b9d293c3befac95f8434e6de345632bc460e48fe7597f94b87c730ec9") 00:04:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="b1deb4a93d679ef91356386a44d7880f3076741da7aab017f971a202069965634ac11afa9bc0d5d5c54cf8fbd92b078316ceddb4ff1e26ce6f0d7df45b71215825bb2801d55db73bb660e6acbe27c5bf07693689449afd0a36d2b7fe68026e71aa0ffa8005c1ce507180a5568e9496e710c55b61d20521f441d59628b4070f5838bdeac1ed306d94d776df8ee5", 0x8d}, {&(0x7f0000000100)="07245683fcf6018e6092380701044541284a83bced3f2bff99e80d129792edbf7b9507303c6c83ad1b0a7d", 0x2b}], 0x2}}, {{&(0x7f0000000180)=@in6={0xa, 0x4e23, 0xf408, @remote}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000300)="d0c45d8e13663e272a6edcc74aad161e89ec7fd2f261d9920f16f0019f12f6f7d8a72c8d2849e8d452254098ffa11c90c030a8668a5cb81d02bb0c426f19da2a4474987902396e69c6f6db9bab455696a56f13297ec3a2a564d0c5c7a9e824e90662f491b26b79dadab2778c260cd33a2842bd2a350eebcf02c0cfb43975dc0f", 0x80}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="f2018272bc67e71d589b938c5d6735c67c048002a1d91a4aad9eff9b56729d67fb53ab0b681bd38bd576fa59b1af871899d53888216fda6ba2449aceab73dde6e3d1db4a74ce125be68da0f5d0c66fc2b8f7930333cf77dc395d2e868f6ad16e8026c9cd1c91211a3c0274ec9def3cfba912f5ed1ff465425d200a63c66923d2d93032fdc3d8ec3be87d5ad966a96818a586ce9ca958e4c2f5b13e66f604c1d322b649", 0xa3}, {&(0x7f0000001440)="56f40b15de915fd67a8a67a7875e33f86e776aa3916af32883f2a3201dbc48c706130ad2c33721000a86cdb3ad33ada470aec71ff8ff78893b150990aef4a1e60a1a0bc17d30b36d2db7e143c52e3c7fb08949a993e446f68b51672478b88eef8bcb505905f5dabe32478adc1b00a13c58a24a7593d3c6c84b0ad03f024b19a6a68dac7a6ce20078d612a3e59059402ffa4216c0ba598868558da97823852c3319f21f0577001df203407a71f87766eaefd2af45e1bd47acee6d5ea2b5e3e0a73a691a012899d02a4d48632277f277fb5c0d2087b43244af77408983e4c538130c31e07f973865a727bdc1ad8592c2062a82", 0xf2}], 0x5, &(0x7f00000015c0)=[{0xb0, 0x1, 0x7ff, "5169af32bb50abfc0a0226f3b5ece7b78e880eb3c468aebf4ed5444486dd0c9652b26bcd1fa38ba3c0fb7762b9d3ec9408ac0ba35e203cda3ba3d88f4777c7ca2214806f6b92082a362b219d18f13bd8613c42549bcf6f79677032b23d37643feab0c221ab8716b9864f6a1180a9177086c36c07d88943e0703ff30c8f804fe8c56c35bcecf8f5630715b58aca446a01524f95388efdcf16ca649583fe6325"}, {0x60, 0x330, 0x7, "07486e43d23e247c736a72dea557bdfaf1e8081a9c7f0c6d92499b0f2ddf0e4a8631831be165e1ccc81116c10b0535127faf767a4e43ab438e0b8e9df7fa61d5621110fb8cf0f95da1e8693b8077"}, {0x90, 0x10b, 0x200, "31ccf40f460e01f391fdfb51b3a5a96861ca31637b434ef473bdcf9389c75e7df02e752591c0287c8606e50a0888547fc27274389f5c8abfd452e6657053db4ded7403320b472fe4761ad4b47149fae00ff791e635a6dba98d422c14d40a085ca76d265a47af2a7b5886a328d894c9ad23ec26b933f0fdb0e465343575"}, {0xd8, 0x104, 0x6655, "ecfb2b86f70e2ac3c07e14ae3b404b144c31c9b23d60f493295c4abf3effd920d039d6d820d35dfd85f137f151be021799066f8643aa742abefd64889e6375fd9cf8e280362f2c696e0f088c9cf23e756ace365a71893a4737394e059eb4ed7b6b35af83087c87145ee451a71157f1b9d49ce7caff8b1f1e601e70625adbd73205ec736a7d9fa8be6b0ba31b227b452f3f002be533eb45906a7787752f740af6353bb185202a76c1372cbc428413a63ad2ea38fafbfc06d8f69c3fadf36e060e37116c5dde"}, {0x40, 0x100, 0x0, "de3c633097cf25537d6ff2ccf98e155b61d0a077cb03d30a26fa46dcb8d686fce5c364b3cf6d85b2339e"}], 0x2b8}}, {{&(0x7f0000001880)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001900)="bdfe5ffe62f79c62ea5001a871753c41cdd082aa07b2aa1419461713dfec7ed5d9fc5d87", 0x24}, {&(0x7f0000001940)="8e6a769cf9343e6f28feb6d7339b03", 0xf}, {&(0x7f0000001980)="ade5cbb32bcc93019f44ccf879b2", 0xe}], 0x3, &(0x7f0000001a00)=[{0xe0, 0x111, 0x1, "ab681efccba5c505603cf3aceb9a1655292fdd5010523cde3077dc5b10596b7477563e727fbd068ccd88cdb591d59f3e5cab110cc83cfcf4f74bc57df636ebaac24ea279c9bd14bd2270220c8fcd5280a09634308b2164367c7d0eefdb195b8ba4c834592aea8faa67f070fe1bb667b6ee7b91e10d99f99a57b7f8b241c06c4ce4efeb97fef5bc314930b8ba6e583fdd6b07ee4cb93391dff9ebd3fa0bbde76417b9401a19ed57ab9168e7e2976e27dc231dd9de5655a2eebca89ca100668ca12b76cba76b47f76fcf"}], 0xe0}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001b00)="094d308b3edec669043a991f6ed38ae0c2bbb0644399d70e60a460eebeae0bcaa4f888fe26f206bb0f", 0x29}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="d56f699c63f09404b9335142bfee86b687f6eb674b7a864e9b5bdba83d454c2e6e67da7ead4b2a53f868f8134f2f15611750833fd370f244c77a93b79203757ab7248a2c21690e8703ca38b865465f2022bf7041a6037559a6d43a24ac8a782919745c3955538f336a0c3538e0013c10ad907aca980c20e43f3ff35bd152213b913287a9fbe8faecd737b0843cec779682d2e68a2aecf06efa047947221a31e61cd965522d72412710fc335cc4e071f11755b87d8eb5e3a556ae9fa3a891ad3de447939999850485a42c6f6f7383c481190fd739a36bfd870f6d6f2fc637da3cd91d6d621e435d57d27b71ffb60ee82e3efb41", 0xf3}], 0x3, &(0x7f0000002c80)=[{0x40, 0x84, 0x7fff, "438332e59f9566398bc5e663156069eb9cc97b2149ca89ec4ab8683ecf4279eff9b038bf445d451f75dda16d"}], 0x40}}, {{&(0x7f0000002cc0)=@generic={0x10, "5d823d6735238676c14d9a16e8138837ffcbad57a6b71ac8ba8e1097390dd5e16766c387b14eee3644b0f107c822bfa378b6de4f559d904adacd3b61a16fa6c69e4cbbbadd7d2dfafbc324b29eeab7fa1d17a5afa3002b71237bfe4744af41b83f8f1e5051085096c3d13d287b42dc526c9a4659a0135d7ccf91112ece8c"}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002d40)="f40e82456d723e0e7222a17ed2d67ba00e53c659cc1047e64dcd1928e0ff80a3355eb69f9dab5497a987000b6da5f07af5dd850a05c03838b8dcbd941f47adbcf58781f27f8eefdc7fde67fc665305e20d19c339b475d653a46db6c9cfa266e539228378eeb1517b7b1c31e6556cc938baf2f5c2993799861fe99a07291ab5fc153babbca59a7108eb859230f9907b", 0x8f}, {&(0x7f0000002e00)="8274db09f522b98eeb57908a33aedd5d8cabef37242a7387cd118f14b9a882763704762c2f183c814f715aff535e1c94a2cbffb1b44be9adccc29f2e97600be9f2df444a7f03f722912e7e75b1cf37b3187ae295ada820b15236458377488496b12973563312e32cf09c8327a6bff2e3193d76f02bcb66815ebfe040aca570f54b93f2feec08a67e4285bd12c9d771607502ebfe97f0e135c805ff18b004e022d64c226f92dfc295786f05711e379c100e6c26de268a662b1de5a41c7a0a", 0xbe}], 0x2, &(0x7f0000002f00)=[{0x68, 0x103, 0x6, "15f2a98b9fc7001dfc0970ec2a713b6efb11d659bde60592fd898a1ee71ab8f6c2dbf9fff2cc329bb7a4fba56347f2daa58cb4b32424d9fba0dc7ec3637408a2e8e9399a572d08b2084d79559f2e80bdc915f8"}, {0xa8, 0x115, 0x8, "d0979a7b5f7211c146797e6526e050fcc6acb6797431008969ec033cf01abe8d35c41f216cfe962e7068a192e595ec0babc92e49220976efcde03570a644e22d86339eab47fef9d285e76d23473adb06eb94143a05f5158f736317442c8d6cd528245e2cfb6782ed23458eb6239fa791363da3d5b7797a728be62567fddf34917781448f370056e8726d0ff4adbb5a0472cbdba0b7"}, {0xb8, 0x11, 0x10001, "515c11ac6f19031b66e448e3b8900cb394e3cfb500fc51f9931164e2573e0552513bee9f47340f5d83b1e69532121ef3875de63cd0d684fcd2f3d3ef5dd862f767398762813c3416a368ea7d5b5c2a5fda5ca7caf7535d91e17e885cf2e60c68fe2224af4f1b19ba629e66564f0ad87b260363b31a640684dfb118ec46caeb04efc76c758a6cab460e877545dca051bd2e559ab171bc18a34c7296b59f24d7623b"}, {0x30, 0x10c, 0x401, "ccaf3e16485853ca7531d7fb149d3b84bc2a7845936899218a"}], 0x1f8}}], 0x5, 0x44000080) flistxattr(r0, 0x0, 0x0) 00:04:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x12a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000412190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1740.976089][T19042] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1740.984645][T19042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1741.016055][T19042] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000080)='[[t&.\x00', &(0x7f00000000c0)='./file0\x00', r3) getdents64(r0, &(0x7f0000000040)=""/44, 0x2c) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x41, 0x1) r4 = getpgrp(0x0) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0xdf87881c5eec4622, 0x2, 0x81, 0x200, r4}) flistxattr(r0, 0x0, 0x0) [ 1741.024574][T19042] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1741.063893][T19038] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.072355][T19038] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1741.109191][T19038] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.117646][T19038] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:24 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 00:04:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000002d0001002dbd7000fedbdf251a0000009f007e80170087006e65745f7072696f2e69667072696f6d6170000008007b0017005a006e65745f7072696f2e69667072696f6d6170000039f4833fb89866c2ade32670f8fe45947c029a9a482ea9188ce2bbb55371fdeae9b59908007b00"/132, @ANYRES32=r1, @ANYBLOB="340020007ddc3775fd6c6374a3aa1a3d805e43cc84490ae74312a67eecf24de320c8eadcea35796e0894f110400293bbf679bf3a00"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ecf000/0x3000)=nil, &(0x7f0000d88000/0x3000)=nil, &(0x7f0000e24000/0x3000)=nil, &(0x7f0000000040)="4ef3aaa6e38a8d2a9d36fd3c147d876c7903474166b7ab53c505fd6d3b72cf496e6198ec30686362d335229d128033e59c228ec6873356536c2765627d8ed964c37d5c53f70c980dd3e53bf7f61792082ab79c2110f0432a148684a112765a3a05452dc7657ffb941891eb2a4580208dad768c08ab76f6c30151b40aefa2ab5fc0f1689f", 0x84, r1}, 0x68) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) readahead(r3, 0x6, 0xf1) 00:04:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040)=""/7, 0x7, 0x5e4}) 00:04:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000425190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x48400, 0x0) recvmmsg$unix(r0, &(0x7f0000005800)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000003c0)=""/158, 0x9e}], 0x5, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000540), 0x6e, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000640)=""/157, 0x9d}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/89, 0x59}, {&(0x7f00000007c0)=""/130, 0x82}, {&(0x7f0000000880)}, {&(0x7f00000008c0)=""/101, 0x65}], 0x7}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a40)=""/65, 0x41}, {&(0x7f0000000ac0)=""/211, 0xd3}], 0x2, &(0x7f0000000c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000c80), 0x6e, &(0x7f0000002200)=[{&(0x7f0000000d00)=""/57, 0x39}, {&(0x7f0000000d40)=""/207, 0xcf}, {&(0x7f0000000e40)=""/103, 0x67}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/194, 0xc2}, {&(0x7f0000001fc0)=""/63, 0x3f}, {&(0x7f0000002000)=""/98, 0x62}, {&(0x7f0000002080)=""/238, 0xee}, {&(0x7f0000002180)=""/102, 0x66}], 0x9, &(0x7f00000022c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000002380)=@abs, 0x6e, &(0x7f0000003600)=[{&(0x7f0000002400)=""/98, 0x62}, {&(0x7f0000002480)=""/130, 0x82}, {&(0x7f0000002540)=""/91, 0x5b}, {&(0x7f00000025c0)=""/21, 0x15}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x5, &(0x7f0000003680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000003700), 0x6e, &(0x7f0000003840)=[{&(0x7f0000003780)=""/147, 0x93}], 0x1}}, {{&(0x7f0000003880)=@abs, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003900)=""/96, 0x60}, {&(0x7f0000003980)=""/35, 0x23}, {&(0x7f00000039c0)=""/8, 0x8}, {&(0x7f0000003a00)=""/139, 0x8b}, {&(0x7f0000003ac0)=""/114, 0x72}, {&(0x7f0000003b40)=""/253, 0xfd}, {&(0x7f0000003c40)=""/199, 0xc7}, {&(0x7f0000003d40)=""/157, 0x9d}, {&(0x7f0000003e00)=""/55, 0x37}], 0x9, &(0x7f0000003f00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000003f80), 0x6e, &(0x7f00000052c0)=[{&(0x7f0000004000)=""/94, 0x5e}, {&(0x7f0000004080)=""/67, 0x43}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/253, 0xfd}, {&(0x7f0000005200)=""/114, 0x72}, {&(0x7f0000005280)}], 0x6}}, {{&(0x7f0000005340), 0x6e, &(0x7f0000005640)=[{&(0x7f00000053c0)=""/254, 0xfe}, {&(0x7f00000054c0)=""/131, 0x83}, {&(0x7f0000005580)=""/138, 0x8a}], 0x3, &(0x7f0000005680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}}], 0x9, 0x40000000, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1400) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x48001, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) [ 1741.147207][T19059] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.155689][T19059] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) 00:04:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x1b80000000, 0x7, 0x3}) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/222, 0xde}, {&(0x7f0000000180)=""/16, 0x10}, {&(0x7f00000001c0)=""/200, 0xc8}], 0x3, 0x3, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) 00:04:25 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) rmdir(&(0x7f0000000040)='.\x00') 00:04:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000448190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1741.193265][T19059] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.201795][T19059] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:25 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 00:04:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) fsmount(r1, 0x1, 0x3b) [ 1741.252309][T19090] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.260757][T19090] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:25 executing program 0: openat$zero(0xffffffffffffff9c, 0x0, 0x610542, 0x0) [ 1741.303049][T19090] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.311523][T19090] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300044c190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:25 executing program 2: setresuid(0xee00, 0xee00, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 00:04:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00005f6000/0x3000)=nil, 0x3000, 0x3, 0x21810, r0, 0x22f97000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'system.', '*%-\x00'}, &(0x7f0000000080)=""/215, 0xd7) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000280)=""/78, 0x4e}], 0x4, 0x1000, 0x679e40d0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) write(r2, &(0x7f0000000180)="08a3b8a3393d6fd6b13c5b2ec926c0ffb3e78721ab3ab9f55888ba297adf15c114582c3a5d23a434897f4f61dd819dd25679b5798c7c11a8dd482c561dcee3d465d29dc9545fb88a84db13ca4a74e179b1db35c5158800f067ba27e70e9f95f4e01d219f1e39c414fa22f501d30402213262b19618dace148749353d63e79b4e36f9f01a6b2341241a0360857b3dae57605b92c3b2862da994e8515c5b9ed90540b427bd8c229db9b2d1b7f854c48a55a82b0bac931f92dad6bda729932b3281f9c3a9b810bd6e89ff52983239e5247759d21b8f88", 0xd5) 00:04:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) [ 1741.346533][T19093] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.354993][T19093] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1741.393427][T19135] selinux_netlink_send: 14 callbacks suppressed [ 1741.393439][T19135] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19135 comm=syz-executor.0 [ 1741.395139][T19093] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.420988][T19093] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0xff, 0x0, 0x3, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0xa4f, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x20010, r0, 0x6f93f000) truncate(0x0, 0x0) 00:04:25 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x60000520) 00:04:25 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) [ 1741.468034][T19116] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.476477][T19116] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1741.498286][T19116] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.506756][T19116] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1741.537208][T19116] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.545829][T19116] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1741.568454][T19116] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:25 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000200)=@ax25={{}, [@remote, @remote, @default, @default, @netrom, @netrom, @remote, @netrom]}, &(0x7f0000000140)=0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect(r1, &(0x7f00000003c0)=@ax25={{0x3, @null, 0x4}, [@null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="65de31cb", @ANYRES16=r3, @ANYBLOB="eb0f00000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r3, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x64}, 0x1, 0x0, 0x0, 0x4091}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x105) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000000c0)='\x00', &(0x7f0000000100)='./file0\x00', r4) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r5, 0x17e2a000) 00:04:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x14c000, 0x1ca) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) r9 = perf_event_open(&(0x7f00000004c0)={0x0, 0x80, 0x80, 0x4, 0xe1, 0x0, 0x0, 0x80000000, 0x80, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x401, 0x1, @perf_config_ext={0x0, 0x400}, 0x40002, 0xffffffffffff7fff, 0x7, 0x5, 0x8000000000000000, 0x400, 0x9, 0x0, 0x7fffffff, 0x0, 0x8}, 0x0, 0xb, r1, 0xa) io_submit(r2, 0x7, &(0x7f0000000680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x20, r3, &(0x7f00000000c0)="2641ec7d3d", 0x5, 0x3, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000140)="a028", 0x2, 0x800}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f00000001c0)="8e0a2c0cfa06c1bf", 0x8, 0x8, 0x0, 0x2, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x3f, r5, &(0x7f0000000280)="7ea413dd88ce56f174fc480bbf43d3a444a29446fc4d61cbd1c18468402919e1307991789d6d55aa87fced67671a7c2aec7fb8f3541e0694bc6edf4665d11acabacddcfc02a63cb025c00dc7611e67", 0x4f, 0x5, 0x0, 0x5}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f0000000380)="3d1a035883a79b10a04a0a954b3dfa7a8767ecf2323287472ecb60c17430dd3b4125ed8e290ba857fb4d8083e24d40e35a5998c533c61eac38ba5e73c0eb729b8d2ad49f22f0c0988271935b2e0776757ccdcad2c927a9901011d6f17341161ec5851a0a5b5e00684f5651baeb7a6b95bb8a7df417cd9222f00241d3ca824a50", 0x80, 0x9, 0x0, 0x0, r7}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x3ff, r8, &(0x7f0000000440)="fc3dd2966a321f23ac175164b4e9eb8ddb7adcc4a3", 0x15, 0xa068, 0x0, 0x2, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x6, r9, &(0x7f0000000540)="3ada03202b08988abb8424da8b2c91c6847c1c80da0d1bbe3e64f19374236512916167af237bf133ff651808e2d2602518d9030217f279627d23e09e97bf3367f381981ac45d2ebd411c8b566534e83e0b161c30e653623926b55d515966147f73221a8453486732150a9a900fdc1ea03166746fc86380abb6249d0739db3b1fa44ca7b182606ab3a50320251d0116854e5b5d509a21d9306f6f185bad7036920270744f04ad6dc56e36915e185fc29746ce4fd2390c87b8896420793405c5d85f36f5a0b7c1d8806a828a0e", 0xcc, 0x1, 0x0, 0x3, r1}]) flistxattr(r1, 0x0, 0x0) mmap(&(0x7f00007ec000/0x3000)=nil, 0x3000, 0x1000006, 0x10, r0, 0xf9d87000) 00:04:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000460190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:25 executing program 2: r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 00:04:25 executing program 0: r0 = socket(0x10, 0x802, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 00:04:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) vmsplice(r0, &(0x7f00000008c0)=[{&(0x7f0000000040)="2847333e8dbe37c6acb000448a1f9783d27fd037ab09ab780e19e5838ea5387ed50b1d0b47222a4a2300155bf3be34b0fc27f88644495bade133da98e2a4d4cf16393b61f8c1fa36b689348f7aa764abe0c9215924d83c813b6aafab2ee8b90e0fe03956009981155c24faeb89e58e874519fa9987e1101a48c9f104b4a5a3a935ce22f975c9d17b0d325a65dd00937551", 0x91}, {&(0x7f0000000100)="e090da4927eb7f45e85e4f9807a0c87b1ce38bc0fe72b975ed2e839f03bbc14ee419a65ab210f058c91a72b921aa5f203fbb811310db0b7fa4e831d565efddc4d77173d8f7c58e8095034e87d4dc58f0965b138f816dcd035fd254c7c2533d50164d726a1833edf68537d11a64713c1aca1e954c7b7a42636077", 0x7a}, {&(0x7f0000000200)="1ed17f8753f5f966f4eaa8bfd27a10d9f3e0cfcdf7dad0282a3f0f14c61847d36038c4c46b5a2683c77aeb5c9977301b8e9efdd39db2beee163064de2ce170a1efc5eaede680aeb37fee9cc4d35dd90272ab83ae8dae232c33b2be2659f84bd15863246919c4540323284cca68c51303dbc12cdb2fcd918caaa69c0374202979fcc0d95a85ef2a8f79c81ae756a8944c56a20b33ecdf1503e94638ea", 0x9c}, {&(0x7f00000002c0)="7eade6275df6b5c116e1129516f0c6f7acbf2c639fe3d64f2e51ce17d2fed261ae850d011d7d1b02ffdfe925d7e42353bb4379d4fb5a08e65327690634408b3de7ebbfd471269c3ac42a6668e0506e5ba2e706832c26d77e9b443c22eb2422d3be5098d1d58bb6556535a8ada679988eab7c8eff6cc899f241d91a566050bfda97ee0e181558d7db53f7f41c653ff62b8bf7dfca3296f6455214af9269b37ab1498bd11157757cace2b3a35abf6ebe09b8d52d53a824ad2d5fb3c379bc5c563058d2aa568c5905bd3c11b741645fd8ce", 0xd0}, {&(0x7f00000003c0)="aa469463e754187f1b0bff19c23afb61067637ddafc467428841d8443763b55db99a54bba6b3c40842c24c02885d6dafc6e3706d1a7fb2947421a3958cb1b803e6c0df0b12e510cc9c7ba5780b11a659b444affe1e181f5582bd75a7072fd17e83caeff8", 0x64}, {&(0x7f0000000440)="45c6256b59757222be5a65d6a42fd1d36c516584d892deb066dcb7fde69bac7ea0549664ef71176435ea9dd2818a8e8b9d063c5ddd437d1d70d88d569ec73071b44d95d74ffe7e88406571e0a091b8cf5ab059aed793b6efdfa5", 0x5a}, {&(0x7f00000004c0)="584920fb54efb906b87ec948f618a5000f78400a35ca3bcedf2386a69b30edc1f826251704d2ad785a278a55b4a69e1e1422495c824b376c302338a1774e66292ee87c20cb077ca6ab2e8fb32916a1bbe7afcf04dbb5822f3450d8f935a428f5cbc5f4cb21b42349e627289f4b9f1b026e25a161cd15202504fb08f05d539293994e3271bbce1aee67e514dc6dff84330f350e5d970441b87be7d3d235e312408bc8bebc59f7dd9e2104f0aad808ba1988a2fd742c1dcdffa5cb142ef14644eba719170c56d8e255573fc4d7c4d26dbffc7cbf14b6445c5c9b3143c7d5ce7321afdb5ca26f040e", 0xe7}, {&(0x7f00000005c0)="8b1e8e55a8599ea61a968c31b82b0a42f85d3cc079c6f3b821d68ff0e5ecbf7e76c350cb1163ac82af89dca45d15a9a0854c741def239c53b462f659ec0e8c2fbc587c27e743272dcfd2bd7d6a3c23d6b689c17d40905fed3ca0bcd30b11041e3151b7cf25427d26dc98850afea732a30e59e5bf0ce60efb5e616e8f2f3479c022ea51aa21d4d77f694f8a90722c01bc547b47704d486222e91b1e296c507ed7a55f7cb75950d0aa0573d51aa6e8455649bf2202636c8827b42968961e03f37749da496cc0c105f2", 0xc8}, {&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="ebc55354cc707e7e71628c87fabd2dfc217a223c2a76ad4a5f2f32866fae7755569f24516503d82ea4f54dad9eca695a47e9d5531cecb1ab1cd6edb4b36ae060d115384f4015bfdb1ec5575af88b8ad73d83cd1ae0071f17a298d6738b6d18fe89f730f8b25bf29907fd0bc2afd37b4c1d6921b78f47a925e80daf2ace3fd9477c9c2f0070d4ab3e5e694e550ecb61bfae13c3f817c82fe98e2c65558e2f6f4e1fc0d7aab20953dc7568118a6a05d6dddf576a1d3eb74ea2d74363003b27fdd5e554ba57ab48602162ae5c6f13b1fced18b7e93e1458e3e502829447cbce54", 0xdf}], 0xa, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000980)={r1}) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) openat(r0, &(0x7f00000009c0)='./file0\x00', 0x624080, 0x20) [ 1741.577059][T19116] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:25 executing program 2: setresuid(0xee00, 0xee00, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 00:04:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) finit_module(r1, &(0x7f0000000040)='\\^$\x8d\x00', 0x2) r2 = epoll_create1(0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x2, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x4, r2, &(0x7f0000000080)="b1824616433676a3676c54aa4cb0d8dd8ac1bcbcd430bf3bdffdd6d08c0c58d686e29c844d3699b104f03765b12c0e4701cb0c", 0x33, 0x0, 0x0, 0x1, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r3, &(0x7f0000000200)="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", 0x1000, 0xffffffff80000001, 0x0, 0x0, r4}]) sendmsg(r4, &(0x7f0000002500)={&(0x7f0000001200)=@generic={0x22, "6ad4e1f2a80616a7ca1b7a93f194c9a98210a1a1b5f62133f97395a452db4d8c2bc809a7672622e4e256225edb7cc983b5612b102871d5220aa3d2954add64adf18c944c080df64484e7d3629ad9e36b9e9b4e286d6b58212e1d78b19145992e0388f9a9b661a1bcac87f2b2b973b56be1604708ebe139715429b8e5d3ca"}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001280)}, {&(0x7f00000012c0)="0a195bd691e253b098f1923923a7fa137baf8859b8c00118bf39b1a51b9c9f42901c24e592e9ccd056fe0c2096bf70f193a7c2b3288381fdaca675a1aab02e153e924b08300b9fdc4838be12ad0b1412d905c6bfaeb071987250b86edb93668576a21c68986471b0b7f64db0ccdf092d2e5ec6a40283b8cb095f7297da34a41c69c4028abdd8076d24027a71a927a1bb11bad637e3c2d58375c0066a797d0596421c2e5172ac9e65aa446d4436b1a50620ff8b33a541c0232d228cd04c1e604e3dd7cd714d085f671d9065658fdc4629a76f5d18655f04adec80fd309b51333113f57e1b5709bab13e", 0xe9}, {&(0x7f00000013c0)="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", 0x1000}], 0x3, &(0x7f0000002400)=[{0xd8, 0x31d, 0x8001, "8e183336d227927374a498c4377f07538a56e19f72c6464c6c3cc2f2df79c5d8fe1c6f09f6a9394571fd673aa3651da1a4ed02d68c2ba43f3f78881e162257119099d3a0332a9fb226d00158947056ba578f9332293dd2a7c7af81e0de5c2ed477fae0cf0b62e95043856b19f19d45c5c51a0ebaa70232c814173d8eb674838d7f841b1abac1f44b157b126ff711aca8db654f7094ddb87eb33795bac72c121c1d6657df247ae651c264ed5b011b0666d36266822cae8e53784411657748b15bb4d684"}], 0xd8}, 0x48000) 00:04:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x7, 0x9) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:25 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 00:04:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000468190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r2, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000040)={0x7fff, {{0xa, 0x4e21, 0x20, @dev={0xfe, 0x80, '\x00', 0x29}, 0x8001}}}, 0x88) r3 = accept4$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000140)=0x1c, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e20, 0x3d, @remote, 0x2}, {0xa, 0x4e24, 0x9, @loopback, 0x4}, 0xfffa, [0x5, 0x730, 0x7, 0x3f, 0x3, 0x2, 0x9, 0xffffffff]}, 0x5c) [ 1741.657088][T19168] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.665595][T19168] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1741.700827][T19168] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.709267][T19168] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1741.759091][T19168] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.767627][T19168] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:25 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000c, 0x110, r0, 0x167f000) 00:04:25 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:04:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r2, 0xe67ad000) flistxattr(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000001}, 0x810) 00:04:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300046c190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1741.799396][T19168] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.807845][T19168] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:25 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000740)={&(0x7f0000000000), 0x32, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 00:04:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000783000/0x3000)=nil, 0x3000, 0x2000001, 0x110, r0, 0xc8b9d000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) 00:04:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000474190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1741.845268][T19189] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.853708][T19189] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1741.894008][T19189] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.902469][T19189] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0xc, @empty, 0x4e20, 0x1, 'lblc\x00', 0x4, 0x4a6c, 0x55}, 0x2c) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) [ 1741.948089][T19189] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.956517][T19189] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1741.973643][T19189] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1741.982149][T19189] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:25 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000200), 0xfffffefd) 00:04:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300047a190009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x440, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x2, 0x81, 0x1, 0xffffffffffffffff}) flistxattr(r1, 0x0, 0x0) [ 1742.032197][T19205] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.040726][T19205] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1742.068797][T19205] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.077251][T19205] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1742.104557][T19233] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.113077][T19233] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x8, 0x4, 0x9, 0x8c, 0x0, 0x400, 0x1000, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x4, @perf_bp={&(0x7f0000000040), 0xc}, 0x680, 0x5, 0x634, 0x9, 0x670c, 0x6, 0x20, 0x0, 0x3}, 0x0, 0x10, r0, 0x2) 00:04:25 executing program 2: sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) 00:04:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) r3 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000140)={{0x108, 0x8, 0x5, 0x162, 0xa7, 0x80000000, 0xe8, 0xfffff001}, "dae9d249dddb72a03d8e35ccaa8c952f1951d259eec2439912400968fedf22dbdd5f69fc100e16337ad3fb0986f5e520aa099098396e56fc9dbc94418bae06de9fc15d662ff2008fefb976fe1f46be2c0035e37f963ee2b1e54e7c7d21ef65ec2338ed9b940114d61875550092", ['\x00']}, 0x18d) r4 = socket(0x26, 0x3, 0x0) poll(&(0x7f0000000040)=[{r1, 0x9001}, {r2, 0x4119}, {r4, 0x401}, {r0, 0x20}, {r0}], 0x5, 0x6) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r5, 0x0, 0x0) 00:04:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001f0009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:25 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x453, 0xf14, 0x0, 0x0, '['}, 0x14}}, 0x0) [ 1742.156448][T19233] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.164956][T19233] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x4, 0x0, &(0x7f00000000c0)) 00:04:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xa2, 0x3, 0x100}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x25, 0x20, 0x9, 0x0, 0x1ff, 0x20, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fa, 0x0, @perf_config_ext={0x5, 0x7}, 0x0, 0x6, 0x4, 0x9, 0xc36, 0x2, 0x6, 0x0, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r3, 0x1) truncate(0x0, 0x0) [ 1742.220706][ T25] audit: type=1107 audit(1629417865.970:600): pid=19252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='[' [ 1742.239041][T19255] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.247489][T19255] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400640009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:26 executing program 2: setresuid(0xee01, 0xee00, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/block/loop0', 0x50000, 0x0) 00:04:26 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x20000040) 00:04:26 executing program 5: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) [ 1742.269343][T19263] validate_nla: 19 callbacks suppressed [ 1742.269354][T19263] netlink: 'syz-executor.3': attribute type 31 has an invalid length. [ 1742.271724][T19255] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.291510][T19255] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10) [ 1742.334300][T19255] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.342816][T19255] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1742.376161][T19255] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.384623][T19255] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1742.411545][T19273] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:26 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)={0x0, 0xfb, 0x111, 0x7, 0x3f, "465d484b1141a3a8e391eb75abae93ed", "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"}, 0x111, 0x1) 00:04:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004000a0009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:26 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040), 0x4) 00:04:26 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 00:04:26 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x2404004d) 00:04:26 executing program 5: setresuid(0xee00, 0xee00, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) [ 1742.419999][T19273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1742.441982][T19273] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.450443][T19273] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x150) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:26 executing program 0: rt_sigaction(0x3a, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x8, &(0x7f00000004c0)) 00:04:26 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 00:04:26 executing program 2: setresuid(0xee00, 0xee00, 0x0) socket$inet(0x2, 0x3, 0x7f) 00:04:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400180009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1742.542896][T19300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.551368][T19300] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400640009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1742.585477][T19319] netlink: 'syz-executor.3': attribute type 24 has an invalid length. [ 1742.586573][T19300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.602111][T19300] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1742.650788][T19300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.659291][T19300] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1742.683376][T19300] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:26 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0xffffffffffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:26 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x481, 0x0) write$eventfd(r0, 0x0, 0x0) 00:04:26 executing program 0: r0 = socket(0x2, 0x3, 0x11) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 00:04:26 executing program 2: setresuid(0xee00, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf682dbd7000fcdbdf2557"], 0x2c}}, 0x0) 00:04:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x3, 0x49, 0x7, 0x6, 0x3, 0x3e, 0x81, 0x3a1, 0x40, 0x47, 0xffffffff, 0x7f, 0x38, 0x1, 0x7f80, 0x8001, 0x800}, [{0x6474e551, 0x5, 0x100000000, 0x8001, 0x3ffb7af4, 0x9, 0x9, 0x9}, {0x1, 0x3, 0xd63, 0x5, 0x1, 0x5, 0x6, 0xfffffffffffff800}], "5c33e30dea16d3f9b4c9f99ff0139052a5ff05980ddc3ec03e45c9f3e791b59226fcbbf92660e382163ae88f84bcd9cfa91f18f1e24ee6a2a9270f0a756dcc523d666da5df550ababed62fd1729fb75528d4f2a8a29f90ee6c4feccc0870b6949f6c86905cb83ab8be47a99808d58c32526c4598d02ab780f4121d429ca9e71122bba02625bc9583c5ff37948cd8ada0595399", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb43) truncate(0x0, 0x0) 00:04:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190003000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1742.691827][T19300] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x9}]}) 00:04:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}}, 0x0) [ 1742.727106][T19338] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:26 executing program 5: setresuid(0xee00, 0xee00, 0x0) setresuid(0x0, 0x0, 0xee01) 00:04:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190005000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1742.770966][T19347] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.779432][T19347] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1742.809235][T19357] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190006000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:26 executing program 5: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000b80)='io.weight\x00', 0x2, 0x0) [ 1742.817949][T19347] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.826370][T19347] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:26 executing program 0: r0 = socket(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0xfffffffffffffffe, 0x0) 00:04:26 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={0x0}}, 0x0) 00:04:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190007000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:26 executing program 1: ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() tkill(r0, 0x34) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9, 0x9, 0x7, 0x1f, 0x0, 0x35f, 0x80000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0xc000, 0x8000000000000929, 0x101, 0x6, 0x20000009d91, 0x180000, 0xa000, 0x0, 0x9, 0x0, 0x4}, r0, 0x6, r2, 0x0) chmod(0x0, 0x0) [ 1742.871758][T19340] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.880224][T19340] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1742.893794][T19367] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1742.930516][T19340] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1742.939009][T19340] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1742.951897][T19377] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x81, 0x80000001}, 0x2006, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, r0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0xe0001, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) truncate(0x0, 0x0) 00:04:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@local}, 0x0, @in=@broadcast}}, 0xe8) 00:04:26 executing program 0: clock_gettime(0x6566b452f3061e5c, 0x0) 00:04:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190209000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:26 executing program 2: setresuid(0xee00, 0xee00, 0x0) setfsuid(0x0) [ 1742.993097][T19340] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1743.001664][T19340] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1743.022944][T19340] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1743.031421][T19340] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000380)) 00:04:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r2}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000140)={0x3f, 0x0, &(0x7f0000000100)=[r0, r3]}, 0x2) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000080)) truncate(0x0, 0x0) 00:04:26 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x114031, 0xffffffffffffffff, 0x0) r0 = fork() ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/106, 0x6a}], 0x1, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0x7ffff000}], 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 00:04:26 executing program 5: sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a00)={0x184, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x41, 0x5, "699811b3880536e0f0250538dc500f176e744624af966c74f9c6c617e0c90e4a1a0250bf4044e91d3c71b673aa7b6b08a0368952c890f099e45e65c633"}, @ETHTOOL_A_BITSET_VALUE={0xe5, 0x4, "200e966ed048c914d81e26838afbd2e5caa9fc889e0ff44ba568e24c315272fa37f0c0263de24fb0ed6c49c40cf1a990c92ae99b8d115264435c48c58325e23e7336407cd1327bcd8db9935080cd0242c35e1a2a644d74562569aa921eee0ef6a43731b36fcda0c64b4c662f1ace110fa8d227e655306c0efd22498dde348677bc3ca58a1c511cbc514d62dcc368eaf2b0a97e5d4fea18b794bfeff64180426198bc7c23d0b7b5d389ee94018eed29e5d74c9b4a775567e7a57e554ddd9416d621bd3819ef949f2eca2e80fd1abb9daa5e41972b62cf0a29a50f78e3e19831ca86"}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'[$ \x00'}]}, {0x4}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_read_part_table(0x0, 0xaaaaaaaaaaaab46, &(0x7f00000003c0)=[{&(0x7f00000002c0)="f6752e10ef8d6cde19e0a92177f7af0ee5b12c09d52803af7b1ab1aa808776b98452c9a4a8b753c9750f338ab0245ce976a4d81a2358e726e0c3bc080cb14e0485a32a6fa4d6e5084ba052d10a212bb5927b8759cd82408f5691915068a92cfe8e71e645473ab56fe477768636333f49eb4f03e60cbc156597f1d8132824684e9dea2c7affd6cb6d6c1ed47d7fa1a1085cc619534ed75f3c84ad4e5c2ac9ce1a56854da28fca3ddfe726", 0xaa, 0x8001}, {&(0x7f0000000480)="55ff4fa933f4caaa202cbc0a467204ccae9561ddb88f2a6da07131fe8fd5fed8d52007bfa96fab0b162286a6ece7b28af83bf0e6c2b1f3782c3bf0396fabf86240dffbba4e4418029847ad682bacd15bf0ad1c90a4f5", 0x56, 0x9c}, {&(0x7f00000006c0)="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", 0x7fc}]) 00:04:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190309000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000000)=0x19, 0x4) [ 1743.155234][T19406] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1743.163743][T19406] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0xff04) [ 1743.206288][T19406] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1743.214778][T19406] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190409000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:27 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/net\x00') 00:04:27 executing program 0: syz_open_dev$loop(&(0x7f0000000200), 0xfffffffffffffffc, 0x103200) [ 1743.261970][T19411] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1743.270431][T19411] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190509000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) [ 1743.315374][T19411] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1743.323831][T19411] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x2, 0x5, 0x43, 0x2, 0x0, 0x80000001, 0x2c29, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0xa0, 0xfffffffffffffffe}, 0x10001, 0x4, 0x1, 0x9, 0x2, 0x0, 0x8001, 0x0, 0x80000000, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:04:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10400, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') r2 = openat$incfs(r1, &(0x7f0000000300)='.pending_reads\x00', 0x620042, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x4, &(0x7f0000000380)=0x9, 0x4) io_uring_enter(r2, 0x6026, 0xa61, 0x3, &(0x7f0000000200)={[0x1ff]}, 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x6000) r4 = syz_open_dev$vcsa(&(0x7f0000000240), 0x859, 0x80001) sendto$inet(r4, &(0x7f0000000280)="6d18586cccc1153846ad419c936b0a5e924b6c2c0459fbf5dcef5fc30eeeb4fe8b651368396567", 0x27, 0xc8c4, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) 00:04:27 executing program 2: syz_open_procfs$namespace(0x0, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/239, 0xef) [ 1743.478318][T19460] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1743.486756][T19460] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1743.504042][T19460] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1743.512492][T19460] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1743.533123][T19460] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1743.541561][T19460] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1743.557977][T19460] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1743.566457][T19460] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:27 executing program 5: r0 = socket(0x2, 0x3, 0x11) sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x801) 00:04:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0xf0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{}, 0x0, @in=@local}}, 0xe8) 00:04:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190609000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:27 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x40, 0x110) chmod(0x0, 0x0) 00:04:27 executing program 2: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x9000) 00:04:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/172, 0xac}, {&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f0000000300)=""/236, 0xec}], 0x3, 0x3ff, 0xfffffff8) truncate(0x0, 0x0) 00:04:27 executing program 2: r0 = socket(0x28, 0x1, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 00:04:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x533, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001f7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, r0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="2f666174b362f16e54aa0694635b99b89b55f628b79122faa0ebe6c43f2fb836edfccd69f0d81b6107923884e34300ad8bf6733eacb3049aa73122461cac94b9b8aa6437d6f2af31e06e7a7d3522e47147d61b1b0ca374045a0acc58120a83b853fbd7f498cc17feb25795a7d1ee4d8c7529", 0x72}, {&(0x7f0000000340)="ce13bbbe67755a9a312eb74f10f07bc7e1e5ab09d169dec06b82591af45e47753ea3768a75aa142e04a897f2323719f923fa7c621f209ecbcff98059f80faf758f89edf3a0321902d0a7a5cc22dc658b18af3170e013811a50b5c91a859768241902c81fcaca63df92517a2473aacf656ab92f284bc3475e8e86776aa0f51f1e404ddb6cfe83621236390bb6bc02ef3cf99e5b13840076e98bc4fc", 0x9b}, {&(0x7f0000000640)="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", 0x1000}], 0x3, &(0x7f0000001640)=[{0x98, 0x115, 0xd2, "3cd36572f2314187aa09ba539a26b2b123bc9ea82d15e1bb10241e4d45730791ed386b63bfce903359eac8c3962b5898df3ae25bc122b050ab273b50ec7392209bd2beca39fc101c3dbbb698a1f9fa3870564fd0207e19ab73d2589068621533ea64dbd0704fe58d490e6bc982d979717afa9af16c38ae106b44d07a0bb66f9903b6"}, {0x60, 0x10e, 0x1000, "57ed42b7331e241cba1d4b42f38a764e7fbff9cb2c5c904b8f6f23692d0c12afb962b2ee9fa3adf27d2bfd45eaf12a78648ce0527d57e74951dde74a98f046c985eeb06b0e1c1a86748795a73eb3"}, {0xd8, 0x10d, 0x1, "f7eccea4b2bf76342fc78dbec6eb9d9d12f62e0d03e982a37d2969b9acae9412810f826ef099abdb1abcdcf788c90851417f19186b220c43ebc524e067ecaf1e991ad8dbdcb8223dcf2bf28f5694cfa2cef3f2480e854b87e4b7d9414c8bfb52bd0dfa2b7f423bf1e32681c93f64fe233cff8ad51873cae1309b2c661766b2c000a28264a35b5774ba39a90b375fe697007bb59ff00d366b007e66a4b3473b4f5b291b1ca5d97ff35fc7f07eba00c334027522819fa65872baaaa3350b0e0f782bf3"}, {0x10, 0x1, 0x1}, {0xd0, 0x0, 0x3, "8d32c1e55b852b7d93648ae40994b8b573c4bc28eaf2ed045b26edfd96e844df9236beac5dae0a6061ee989d2a0f8fd8a28caf66884c66ba979490ee8f675e7a563f1e74723841fd416a9321b6c4d8999bbd0921abe4e2cfb7294dd7045ff1e866c3fdd48543f0fb61f65a2e31e381decedb5b052d04d36bfb93bbf84bf5ff152993e9218869a48fc223a736dba59e2d8ab334b515feb22c0180c3045cda0180ae0a7420f9e63c32963faae6084528b39a7d935358cb0e457b937b10c7a0b1"}, {0x40, 0x101, 0x9, "77ca59667e6287388e04e0b949ff746aeca00751576c924d1113fa9aaf49f3fcd4504031d81a41a053ab2b00f2"}, {0x78, 0x88, 0xffffffff, "bec0706bd0188a730c57b4b2c1569906a43ce0f67797b54174f529d90ec36be35ec0de52afbf0a7960b26e10cfb82eea23006491cc2f7d1b0ce4e01e9a0627214ba931b5a8f7052704b358bc7470290fa1d06311dcefefbe959067a0b50311004a"}, {0x1010, 0x109, 0x0, "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"}, {0xe8, 0x113, 0x2, "b722fa32c717b581ddf710441c70c89c7ad679fe27fdfb124ddbcdd9d90421f0ad5f867137360e37ed1f941b55bb1a6328e1f696a3c080e9b23f37cab72c825eaa731b7a7e91f4d3e166e9ff44385454602e85945d2af1fb1f49875ccf238bf356d69decf680839fbf77c8989f78bf4e5c3ac334550b20462442ab2b37d62f9644ebdef98bfb7342d668a97b8554d79f808a13b07c008693b7c971ce99d32489198716a6a359a5162f013d8640f70b8c600c548cc8c1e409edf854c079e1ff6f1cb090f62d053431a5ea3d5e11042ad6444f45a5d6"}], 0x1460}, 0x0, 0x4080, 0x1}, 0x200) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb, 0x8010, r6, 0x8e12a000) 00:04:27 executing program 0: socket(0x10, 0x802, 0x0) 00:04:27 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x898b7cc59c03a1bc) 00:04:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190709000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:27 executing program 2: syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x80) 00:04:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x0) [ 1744.187537][T19495] __nla_validate_parse: 45 callbacks suppressed [ 1744.187551][T19495] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1744.207491][T19495] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:04:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190809000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:28 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000006700)={0x0, 0x0, 0x0}, 0x40006103) [ 1744.248032][T19477] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.256822][T19477] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x5452, &(0x7f0000000180)={'vlan0\x00', {0x2, 0x0, @dev}}) [ 1744.315462][T19477] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.323923][T19477] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001500)='./file0\x00', 0x5, 0x8, &(0x7f0000003a40)=[{&(0x7f0000001540)="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", 0xfc, 0xffff}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="f289fff939ca256b20e902ba86e560336430d6c53028dca7e1794548d4b10f9f0c30fd81165e6f9046bcf0161f4988971d52b05e8dce2f2887271354eb9719cb778604048e917477c779dbd2b46008b5c582992f667464f99f4848caebe3b2420a5777c68377a0ae567409d3bda5c8b39edc5f647f0089d3547cf988bc4892da4f7f771f26d250503b008bee9425a8dfc8958b28a9c06585268ff7c88fc6c617a8caf3e9538faad7c860057ded9b17c105d3cdea86db667665f8be260d6e62b6896513e7d97eede966406beca82dd51f5a7accfa317a", 0xd6, 0x202}, {&(0x7f0000002740)="f4c52ae8f176b30215e9876b9f33ba31419c71f24346233f6ec471b73540ab4be5c23a9acbe8ee15c0c280d61746e53a284bc377ade14ff6a2bf74d5dd1032cc30d8b5b4414c30145e26d5c59e019eb55c0e0517d93d42154e527d1912166434cc6091796e801549f18862c40e0501fbcd72fb75ce", 0x75, 0x2}, {&(0x7f00000027c0)="8ea18c16ad4be495671b1022e062f1a516ff3fc7a9030136825c16aaa999ba3c137888d8d90d191426611c487f91055b38caaadd25c2783cb620c5078da089cec6bb05ea5a1e8f688fd574af92f2088f49262770ce57cfb7943602bb89f723143b4ed14853fe675b63defbcbb7cb32f14eb539522ddda6e965cc8f8f4acb52c8d3b0509432e431896e0f5f1e82bde8dc3ff114394cc0513a4b228c886201e6c1da1268a302a2fa1ed8c2978bbea5193ffe07298630c3049e21376005f4aaa703b165cc5289493ff4b8bb20c0d2a1ea70e3f1391339079aaf48f0df51112e727e6dd9", 0xe2}, {&(0x7f00000028c0)="469877972c7f1567daa9beb575fdaa0760f7343c1861b3b101dcf484cd6c353ff465ff9223d113c8efd5f046841114be43c2f19b26abc657269e4cf8a6841894f1ed5c679aafd9859b0fa62b8a6ba7e25689a36f93e5f0f25295216329c606ce2b978c8068723d2fce71ca6cf44df5dcf4cf13f8dabdf473fc6931c8461e522f34e4592f93cbe0ba03017024b362e75cecb15048b153ee39e09089d2a4fccdbcb61cca8fd5bae6ed7c901929be", 0xad, 0x6}, {&(0x7f0000002980)="7a8678a30609bd0340a9a4caf6fa54e8687ed45df1d36e77cf8c81f93f38fd837ccc27ae61beb2ec43abde1d0f21c64660964f31868526cc5543716f0fe1285344d419af94672ed963ef8c26fcf3f53b989a11b2280babc634608aa9d185073c09e3b45513258f81ef10c893f675b8f7bdee79f9973b053f474419168fea07be07f9af24fbbb05c9fb385361ee57201771eb49c7f5dbfa5afdbe5e55d7073baee4b3c1f0ead0dc06bc04da27f8", 0xad, 0x1ff}, {&(0x7f0000002a40)="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", 0x1000, 0x1ff}], 0x0, &(0x7f0000003b00)={[{}, {@nodots}, {@dots}, {@fat=@check_strict}, {@nodots}], [{@smackfsfloor}, {@audit}, {@audit}]}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x0, 0x80, 0x0, 0x3f, 0x20, 0x3f, 0x0, 0x1000, 0x4828e, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x9, 0x9}, 0x6000, 0x1f, 0x6, 0x5, 0x9430, 0x0, 0x1, 0x0, 0x400, 0x0, 0x6}) preadv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000380)=""/239, 0xef}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000100)=""/13, 0xd}], 0x6, 0x1, 0x8) truncate(0x0, 0x0) 00:04:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190909000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@abs, 0x6e) 00:04:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 00:04:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)=@file={0x1, '.\x00'}, 0x6e) [ 1744.383423][T19515] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.391899][T19515] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:28 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 00:04:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1744.429448][T19515] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.438074][T19515] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1744.502036][T19515] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.510492][T19515] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1744.523565][T19534] loop4: detected capacity change from 0 to 255 [ 1744.528321][T19515] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.531439][T19534] FAT-fs (loop4): Unrecognized mount option "smackfsfloor=" or missing value 00:04:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r0, 0x33ba3000) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x81, 0x9d, 0x99, 0x29, 0x3, 0x3e, 0x6, 0x3ffc, 0x40, 0x27b, 0x8, 0x3, 0x38, 0x1, 0x101, 0x81, 0x3}, [{0x5, 0x52, 0x0, 0x1, 0xf4c5, 0x10000, 0x7fffffff, 0x2}, {0x0, 0x7, 0x9b, 0x4d, 0x76ca, 0xa97, 0x401, 0x3}], "68293f8e468c13e10448bdd7f6d3c3aaaa36f0f5b60c7aef3f327b7257214df51dccf56b0645db8475b9eeaded7bc9b154afac84545428f9bca7a5958b3efea12a56cc5c11b3b7b2c6c55e0eabf6d9d57223f6a880989188216a16d985b6b8273781665834c855c1cf70386cd118216486e25ba44412e708a10179b39431ec527105e1799d3f654fe07c7f4de1c31d6e0797f83d200b3cae8e840a8453b86194cd6fe478c1e68797d89cbd4f79568b2f1657b25e2da31e53b0cfbc0304d6e08ce86f894b88e864d56d0648af6cf89128342238efdba94b5a7aa6263f69e22096", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x690) 00:04:28 executing program 5: syz_io_uring_setup(0x3b1a, &(0x7f0000000080)={0x0, 0x0, 0x22}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 00:04:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x4008031, &(0x7f00000000c0)=@abs, 0x6e) 00:04:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000002480)) 00:04:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190a09000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1744.538229][T19515] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1744.590687][T19529] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.599137][T19529] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1744.650196][T19529] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.658661][T19529] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1744.673766][T19546] loop4: detected capacity change from 0 to 255 [ 1744.674343][T19567] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1744.680872][T19546] FAT-fs (loop4): Unrecognized mount option "smackfsfloor=" or missing value [ 1744.705168][T19558] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.713634][T19558] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1744.729545][T19558] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.737957][T19558] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1744.757564][T19558] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.765967][T19558] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1744.783853][T19558] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.792299][T19558] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:28 executing program 4: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x1, 0x7, 0x7, 0x6, 0x34, "b3bc9fa0282e0d18ae7dd47d5a90056356d2f2", 0x42, 0x9f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x5f) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000200)={{0x108, 0xff, 0xa, 0x1c2, 0x1de, 0x286, 0x3ab, 0xfffffffa}, "2c2b1e672c16ad1e632598d0bc712fb79673c898cd99b668e97a93df6efff6107001b5eb", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x644) recvmmsg$unix(r1, &(0x7f0000002240)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000880)=""/172, 0xac}, {&(0x7f0000000940)=""/70, 0x46}, {&(0x7f00000009c0)=""/162, 0xa2}, {&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000a80)=""/69, 0x45}, {&(0x7f0000000b00)=""/171, 0xab}], 0x6, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000cc0), 0x6e, &(0x7f0000002100)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/38, 0x26}, {&(0x7f0000001d80)=""/160, 0xa0}, {&(0x7f0000001e40)=""/135, 0x87}, {&(0x7f0000001f00)=""/52, 0x34}, {&(0x7f0000001f40)=""/32, 0x20}, {&(0x7f0000001f80)=""/85, 0x55}, {&(0x7f0000002000)=""/241, 0xf1}], 0x8, &(0x7f0000002180)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x3, 0x20, &(0x7f0000002300)={0x77359400}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000002340)=0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000002380)={0x4, &(0x7f0000000c80)=[{0x5, 0x1}, {0x4, 0x1}, {0x846f, 0x9}, {0x5300, 0x6}]}) 00:04:28 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ftruncate(r1, 0x0) 00:04:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190b09000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:28 executing program 0: r0 = getpgrp(0xffffffffffffffff) r1 = pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 00:04:28 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000001a40)={0xffffffffffffffff}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 00:04:28 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x9) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) [ 1744.817666][T19529] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.826091][T19529] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1744.843064][T19529] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1744.851518][T19529] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:28 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x4280, 0x0) 00:04:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190c09000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:28 executing program 0: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x7ffffffff000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 00:04:28 executing program 2: syz_io_uring_setup(0x5645, &(0x7f0000000000)={0x0, 0xf6a6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) shmget(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x3) 00:04:28 executing program 5: move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080), 0x0) 00:04:28 executing program 0: syz_io_uring_setup(0x5645, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x3) [ 1744.991890][T19591] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.000379][T19591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1745.029186][T19591] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.037659][T19591] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1745.054527][T19586] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.062962][T19586] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1745.078777][T19586] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:28 executing program 2: socket$inet6(0x2c, 0x3, 0x0) 00:04:28 executing program 0: socket$inet6(0xa, 0x100000003, 0x3c) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x100) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) capset(0x0, 0x0) pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000400), &(0x7f0000000800)=0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:04:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x401070ca, 0x0) 00:04:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190d09000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x4, 0x1, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xdc01}, 0x40080, 0x0, 0x0, 0x3, 0x0, 0x80400800, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb98767e5ba776692) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socketpair(0x10, 0x2, 0x2, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) sendto(r0, &(0x7f0000000980)="11311f1dfe0b54f7c0ecc64970d8d09ee7f11810900d245ada0e6402bd576b43c227eca2d9e478c3f5317e68594762d30ccd067bf7d8395853769f86f8877aa4677ad66f17b48a77f57c9508472818cd02faeb88090b3d76da9f4e30800a3f6b5bd4d0cd654c3a45fab761cb6df086c04e7035c627567439af945dabd749b053f3f692c82fba81aed6f82925e633ffed6d706706cc7b9c3ebc337d2175162cddd267515f9ffe044a7be5aa9e42c9f84fb10ebdf4b11bcc5e42bda436ea29", 0xbe, 0x401, &(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x10001, @empty, 0x5, 0x1}, 0x80) sendto(r2, &(0x7f0000000000)="b268df7ad3372ec9bcd8ef18b5ca5c30e2689c99d86fab5d2fab3e8ff3478ba432251b3c7f334bf3a238fb7d01b9c74b6f626d290d71405bc287cd635e9cc6a426ea5f79da41b985d9903e9dccb970a0cfb67536bb9c9aa21658fe8822174ebbb9ee891ddb69355d4fad891072541bb26f355c5571a59e852d784f679e662bc011d7", 0x82, 0x40800, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x2, @local, 'ip6gre0\x00'}}, 0x80) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket(0x27, 0x2, 0x5) recvmmsg(r4, &(0x7f0000000700)=[{{&(0x7f0000000480)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x3}, 0x914}], 0x1, 0x40000080, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890c, &(0x7f0000000bc0)={0x0, @l2tp={0x2, 0x0, @multicast1, 0x2}, @l2tp={0x2, 0x0, @multicast2}, @can={0x1d, 0x0}, 0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)='wg0\x00', 0x1, 0x7, 0x1ff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c80)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r3, @ANYBLOB="04002cbd7000fddbdf25170000008c000180140002006261746164765f736c6176655f3000001400020069703667726530000000000000000000080003000500000014000200766574683000000000000000000000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000014000200766c616e3000000000000000000000004c0001800800030001000000140002006d6163767461703000000000000000000800030001000000080003000200000014000200697036746e6c30000000000000000000080003000100000044000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800030000000000380001800800030000000000140002007767320000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000014000180080003000200000008000300010000000c00018008000300030000002400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="561714223d9a19847d637d38f8fbfaac60ffddad7f03c0f47c4eda6872ebc803a7fdedb8375cff39ec2d69ba3cd8c03ec3415af7070202c1d84ca4ede4b1fcb5"], 0x1ac}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000041) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000640)=@ll={0x11, 0x17, r6, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x80, 0x0}}], 0x1, 0xf78a8edc5ea57529) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @broadcast}, 0x10) truncate(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x2, 0x1, 0x0, 0x53, 0x0, 0x100000000, 0x4000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x2, @perf_config_ext={0x4, 0x2}, 0x1000, 0xffffffffffffffff, 0x1, 0x4, 0x20, 0x0, 0x101, 0x0, 0x20, 0x0, 0x10000}, 0x0, 0x5, 0xffffffffffffffff, 0x8) [ 1745.087194][T19586] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1745.115657][T19586] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.124098][T19586] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1745.159996][T19586] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.168439][T19586] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:28 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x81, 0xffffffff) 00:04:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190e09000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:28 executing program 5: socket(0x2c, 0x3, 0x7) 00:04:28 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x244200, 0x27) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff6ba, 0x0, @perf_config_ext={0x0, 0x1}, 0x2001, 0x0, 0x20, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x47f, 0xfc5e, 0x20}) writev(r1, &(0x7f0000001480)=[{&(0x7f00000000c0)="c95aa9858b3e55a72cb584292b5b8ab504eaa51e7a2042617132c4e40881060d1facd33b3d2a7b351c487abc111333094fb14fea2fa385ec89421dbe1e1e9c98add39c6c09d707ea39a25bc5e3d0f93760ca4088be1344f10e04aadd43140b615c5d73746de4f1c7ae3cfd6a4ed7f3e90547e0a89ea2e634ef4ccb76eb5f91494897141dd7c5da4eb8ba562a8091859146bfe6257eabd55218451e35e27d6ab336e2e258bad198d8decdd92851bfe69190695869a1a88a", 0xb7}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="91200bcf8733e7582fabe7be7e5c871e30b8e77af15010ecc62cd814c37f8b1ac29de9dde489bf3e3f4d0d5248fd1774f74b43025f31d84edb23168be1ca48fb371f0029fff6fe01a782bbb8aca9ae5094c574fbff0f62ad0c5e2a4c9bc2fd417f5a41e04dc2ef91ad2e51b9e2935f03896b6962a561671ac78f916e544aadbcb108c3834073c1145343642893108b2f621ae1a39dcc6a76f21623f6b4a3ed9d8ed79106517839af35d4fd965c33bec43e234ee7700e639ea1004731836a6a67cd5c", 0xc2}, {&(0x7f0000001300)="10c7e2bbae875d99cce002538197f4fac630da779bc7839abca8cf334563d9cd4d5df5d3bc9da232f01daae3777ac21f5235661b67a37a486dda661dc38737fc5f590bce8d66d30dd7ba5e9e29899b352d6ccb13c611069781b1f03d2af9ef62233e399ad032a646c99e247a45ac5dc5bfdb0d8cc05d2aace0e92e80d914bd413f1de593ed7afeaceef8c79b1bbac298da160ecc8ccd5f9c8b30ea3f9861af167f9d34abd68204ec5e1e96895dae33354ef29b50a49f584b", 0xb8}, {&(0x7f00000013c0)="166338774ca57bcdcbda375472bc3a8c81afc6276f98db8675bd26961054af0a0198c58065d2e54c89845e057aa8bd2fce3d", 0x32}, {&(0x7f0000001400)="9b4d97a505a9d48a36d713b490ae8256ef23eb7dce651c92b0bf33a10ce2950b10dc5ab0374fa66c078cf03d21e8d0f62c855d3516dcb958648e0523ee408b85eaa58431495017cd", 0x48}], 0x6) 00:04:28 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, &(0x7f0000000080)) 00:04:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400191009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:29 executing program 2: sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0xbf81efa484893e5e) 00:04:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) [ 1745.303396][T19642] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.311970][T19642] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1745.357891][T19642] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.366339][T19642] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1745.421351][T19642] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.429827][T19642] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:29 executing program 0: socket$inet6(0xa, 0x100000003, 0x3c) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x100) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) capset(0x0, 0x0) pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000400), &(0x7f0000000800)=0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:04:29 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x89e0, 0x0) 00:04:29 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000340)="480000001400190d09004beafd0d36020a8447000b4e230f00004e21a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff04000000000000005839c97b910000", 0x48}], 0x1) 00:04:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400191109000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1745.487162][T19642] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.495601][T19642] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:29 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x1) 00:04:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) truncate(0x0, 0x0) 00:04:29 executing program 5: socket$inet6(0xa, 0x100000003, 0x3c) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x100) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r1, r2, 0x0, 0xef85) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r1, 0x0, 0xffffff38) capset(0x0, 0x0) pipe(&(0x7f0000000040)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000400), &(0x7f0000000800)=0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:04:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400191209000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:29 executing program 2: syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x0, 0x60}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) [ 1745.639741][T19687] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.648209][T19687] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, r2, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x1b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000380)=""/253, 0xfd}], 0x1, 0x1b, 0x9) renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x2) 00:04:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400192509000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x208000) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xce, 0x0, 0x0, 0x5, 0x0, 0xbe8, 0x40801, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0xffffffff, 0x7ff, 0x33684a0f0b2a464, 0x80000001, 0x3, 0x9f5, 0x0, 0x3, 0x0, 0x401}, 0x0, 0xffffffffffffffff, r0, 0x1) truncate(0x0, 0x0) [ 1745.778428][T19687] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.786950][T19687] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1745.892550][T19687] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.901024][T19687] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1745.952292][T19687] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1745.960767][T19687] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1746.030485][T19718] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.038946][T19718] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1746.102875][T19718] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.111356][T19718] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1746.155569][T19718] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.164027][T19718] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1746.201898][T19718] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.210351][T19718] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:30 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002280), 0x208000, 0x0) syz_io_uring_setup(0x745f, &(0x7f0000006380)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000022c0), &(0x7f0000008440)) 00:04:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') read$char_usb(r0, &(0x7f0000000040)=""/71, 0x47) 00:04:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400194809000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x7, 0x7, 0x8, 0x0, 0x7, 0x20401, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x2, @perf_config_ext={0x9}, 0x4000, 0x4, 0x5, 0x1, 0x6a4b, 0x31, 0x5, 0x0, 0x3, 0x0, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) 00:04:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, 0x0, 0x0, 0x0) 00:04:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 00:04:30 executing program 0: r0 = gettid() move_pages(r0, 0x1, &(0x7f0000000a40)=[&(0x7f0000fff000/0x1000)=nil], &(0x7f0000000a80)=[0x28fc827], 0x0, 0x0) 00:04:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400194c09000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:30 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fork() ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffea}) [ 1746.329565][T19735] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.338040][T19735] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:30 executing program 0: syz_io_uring_setup(0x5645, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x3) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) 00:04:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400196009000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1746.372669][T19735] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.381254][T19735] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:30 executing program 5: syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000240), 0xfffffffffffffffc) 00:04:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400196809000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1746.471906][T19738] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.480378][T19738] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1746.501841][T19738] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.510321][T19738] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:30 executing program 2: syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x181a43) 00:04:30 executing program 0: process_vm_readv(0x0, &(0x7f0000003240)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, &(0x7f00000048c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 00:04:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="fb4ad56314122589c26685b536cd38526ee4b46075db", 0x16, 0x3}], 0x1000400, &(0x7f0000000200)={[{@data_journal}, {@journal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@noquota}], [{@dont_measure}, {@obj_type}]}) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:30 executing program 5: clock_gettime(0x5, &(0x7f0000000640)) 00:04:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400196c09000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r0 = getpgid(0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100), 0x2, 0x301000) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xc, 0x2, 0x0, 0x1, 0x0, 0x4, 0x214, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x1240, 0x7, 0x1, 0x4, 0x2, 0xfffffff9, 0x400, 0x0, 0xfff, 0x0, 0x10001}, r0, 0x0, r1, 0x1) 00:04:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89a0, 0x0) [ 1746.589681][T19785] loop1: detected capacity change from 0 to 264192 00:04:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x5450, 0x0) 00:04:30 executing program 0: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 00:04:30 executing program 2: syz_open_dev$vcsn(0x0, 0x0, 0x0) syz_io_uring_setup(0x5d1e, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x618}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x5000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 00:04:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400197409000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1746.650934][T19787] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.659400][T19787] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1746.675705][T19785] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 00:04:30 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x9f) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x8936, 0x0) 00:04:30 executing program 0: syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x14) [ 1746.714203][T19787] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.722669][T19787] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400197a09000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1746.800351][T19783] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.808846][T19783] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1746.851397][T19783] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.859853][T19783] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1746.872187][T19785] loop1: detected capacity change from 0 to 264192 [ 1746.886662][T19783] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000000)=""/103, 0x69}], 0x51}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:04:30 executing program 2: r0 = socket(0x2, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x890d, 0x0) 00:04:30 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 00:04:30 executing program 0: shmctl$SHM_STAT(0x0, 0xd, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x8021, &(0x7f0000000180)=ANY=[]) semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x0, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000200)=[0x40, 0x0, 0x0, 0x1, 0x7fc0, 0x3599, 0x4]) r1 = semget(0x3, 0x3, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(0x0, &(0x7f0000000280)=[{}, {0x3, 0xffff}, {0x3, 0x7, 0x800}], 0x3) semtimedop(r2, &(0x7f0000000080)=[{0x3, 0x5}], 0x1, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)=[0x6, 0x1]) semctl$IPC_RMID(r1, 0x0, 0x0) r3 = openat(r0, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r3, &(0x7f0000004200)='t', 0xfff4) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)=[0x0]) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x401080, 0x4) semctl$GETPID(r1, 0x3, 0xb, &(0x7f0000000080)=""/7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x13, r4, 0x0) semtimedop(r1, &(0x7f00000001c0)=[{0x2, 0x3, 0x800}, {0x2, 0xb615, 0x1800}], 0x2, &(0x7f0000000240)) 00:04:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000200)={{r0}, "22952c46e592cab50bdccd7bd19fa534250d5ce351bfa924fc97b438eb889fa14227f977ce69ccccd9075e5eb3e7111f901006b4422ff36044ac9637ead278ce89285b24a5dff7534492f040e2881d1ccce06121463031e73f53a6f644a057a92aaea7b9ff559bf84f807b6db6e8f2572a88081e2b860518d48579f3a59c3f3fc3dc3cbf2ea4c0f2c73ef77bffdc9cf490247189ac1a8e49b14fab1e4d0ae8e4eaab2cbdd2aaead96cc015b6f7e31699fc2248041d459bf59b78108f5b5ce1725b1897b2c91cb7a85ead48280f4ca4dc962c87d00b69e225c537ee4e0ef983b894b63a6be1beed9545c97fd56683a6a41c900927b902312ac691144b389a5777d03405a94bf88adaf5ed7777d32e9d35e780d1a32a3a352614c22f437c6db06d2c12303c20bc675ea0ffb5c81e64e38dad9e7870693b408c632cea5316da9a4330aec96181b6ab50371bbfa18852bdb6e7853c506f7b2f07edd47f7fc6f97a9a0a61f1a9f52d0b5661eb0c5c2d6429ff1708ebbaafbab86d68a8840b6aa639ffe39319e2065ff270c9eaeb9f301036cf7804ee95369c6bb65a3d2280622957710c03893ff1bfd7c63def869fc7e594ac93290dfaf38425e17c3c62ba5ad26e414500216d80936e9864ee00d8b031136bd35dc07b7b774e5452a14c72d3ac4daab229e96ce10c50a18ab99a67009531bc10b2d528d9155b88e87fedda193a8eebb854eb675bea6e88de18b96b3f26fa63ed5c54930fdd34e2cdabe71cc8ed45b9ac2f20c8d8816426deb0883f6bf35fa5db1f542e84e08dcb1f1ecbe8c73d07e1482cad7be5aef2fd418c8889edb443e89b38a581cfe1fc41652ef650682955e04b14cc22e239313be4bb50511f6c2d9fa7674442699e5208ee1523f7e5cd066b261180ba247c869175c60638f27bc6c910e9485c11fabf361c6021d571a8dfc0f7d32894752defb0484a7e04087f4623516d25d06f22a6171ae3e6cb3f1f8fbf5a3be30c4f8f7c7461f7a918a34c2a98c94e1e4cf485ac421edee2a575f070d647101def1f3b6a15924a1d4c4f6fa0ddcf24b395876f5501f035d7e772e97a1b683d6fa7d2c4eec748fe36e4bd30d48b0d005908acf6e00a00efa715c82098557c840f1dafc785939016d3f7686cc9dbe633002c32baa62a5dccff9738eeacf45b168b36ed7175d2949ef3326b6ee224725254677e17d8b98f55d8c023452c141ca0e2f17959bcf12edda6ca7e065e3d611cb7f65c176045fd13ffccbecfda5ab2d7a365ffd0fcf308a3dd415bc85ab30a9e81e9f56408e9be5f1a1c128dbef677d94ac912bc4af752dc01aa282f5fc7453423980fa435dd84c8ca45fd8219518543171bfd7b78070226401330681ea6c746f592c608fce51ce60314bfdc4b0d2ce23025ace6f6762c097d12b6acbfe9da36a5538b8bf1c453b5ca7f76a6e0ace15864a4545f3692f177d59fcd06950d457537622cf7a56a04abb990b72c711a8b2f6ed99c1b8f44f800c85846db8b6cb33cff8a95fe1cd835dd89a7a3b6177c05cfa0e238825b30e4f734002d6aabbda7313e644b48fa5e5282790d6cfa5a9b785db9af51ec9fb6d148c117e71ea919717134f2ceae3c8a9d16fa6fb7c4bf0b6c82e58f77c13d3ef685536ac01e75b579070527468c9c1c11d38ca57f63a9a3e0b81a6797e862497547e808d156765a2e1d5b19ab0efeb026492c6ad37d10aadc115606d241df1998d519e9b22b22c1b8c98681ba5083671d261d25e036d445b84700190e4d9972ab231ff58f86a55bf7743e411f6b1d12d64edeefbb966cb7bc03ca1b817b3b3a0ed1bad2febcca321a0729d3c7fb765076d74314be5dc5f048288287f2a96c0762adc45cdce2c53a68aa7b635f495dad23daa63d48b7b2d37cd02b1ec6ff14af225229d8164493e6a0b86528528e844c66bcdfa6e9a78513fa16d910293910425d8866373e4186689bd16566a632f6a0a6795d89378073259e808fe4b95342cda0700e63dc809fa53f6daf174a1deb9b0bf61c8c596d13d0cc053df299bc5f31bb0505f71461871bf5341f987e6fa1f19f4d070c4efe6b93fb110ed47367002c8dcc14aa7032ba72c69308b21e3287dc2c97a2d8b98c85d5985b2f8552b6438b0bfb6779ed3be9dee33931f67e173758d1c64032834e7c1d35423e50fe6a6370eed8f8061f1a5eb1ebe09cdabfb659c002d817b855180e4f763222274f40037976b6ea737ddd038d363ebb498fef8e89ee65c2843827eff11d99cf274955bf8ab6a1ec5de907a08d092224b7aab7c46765ecd19f7ef7f0753f045cba87882175c43b5badad7eb4ca8932790507cfa414ee16181e63af5b11970aab01813576efa06ed1a364c3ec27629d0b25e2d62c77aa2917b219f3fda475df50e79aa54ed09340f64af6042aba020a6a883b931bb1b3341372f26efc0078aee371851e2673396065ee2af717dc042f03dd83aff19d43883bcb6e303d27f4ac237f735c717d62800263f72e42ffdc9e837512eed3555f97a1e7dc96dfca96fda1c9dfe061ad9fbace1289f9a8ab3b905ce95ffc1a89b91b42cc8430c43ac342e76e1b9fd0f1951cc2c9e378d9c618fcb3dc77d2a7209f94dbcbaa5122bbd43757ca9729613aac0e5b510ade83e7665cdbef93676896d89591a8f356bf5c90d43da633e5f2d2391fbfd05c482a0b7c68d823b5fed9974c07501a0a736efdf30cb96bae74d707c2b273f50028eac4bc126d0a4adee29ac947ac1a5b179668f88ebcd124f6864ec9d4022ef6acda9d5dda08a2761ff2b48c72e7dff17b1824d1db1b93c24bd6783a1a6b51b378d698d2de148aa37bbecded97ea9c6e9e1db55d9413bd31c67c920e52eb174c0ed67c95a4c36d9d5ff87d737f0c5bd00aff0f0419911c3271208e5a648fb54864b2d4feb696203880d201fba7c71c10f48ca4bc4965cf515f29a855cdc5b3ff3ea38bcdcbf406a1a27cfd8937f47b56694d722248820593bb5eb21c070dc807933006f5062dd6e1ce823300ed40dfa086fcb82aa4adda59f6d7566fd19cb1c25208aa3d2caefd5c8ca6f5ab50d714e96a98a03d9f8f2764b8784f4d377bcdf80e00a53bae55495a3dfdc66d8436ac1df01a075d8c3ab7600a69993bb6a49622fba4a08b1d466689e85eeb3a9b748026e72219a2b9948f2b9794b6f0e71f945ea646a2564ae023636760c48f5339cf000e8a6da37ddf96c01a6b5f3cbf3b4e605bc67f5368b9f6945d3d27bc2605040b49b34b5ce58b5e13eb308bbd69c90360fac501196ea2cdb04d23d3c36ed7812445642b83e2271b3e5ff40c616096f21428d191d3c027e87f42fd6d30919934e33c669838f14b68631220de7d8c9aeca998682911a6be94f46610be49bdeeea5fe65dc70497cf0cb6427c21edcfffc9d849323748868e0cd6737f9171b19e20e1878ccbec259bca9c2c7e3c116e1abb8dc231b19df07b07fa0bd917e42803251f1acad5dc9378ec73bb77aad4c9d6418aa0d88064397bce1fc8a1422ecc5f98ece1583474c8c3794c7bbb980bf96bd0c951f29e827add4a8e042ee1bd40022a08cca339ae10b58f973a6e2277034839f7ead2468011882a75a3b434a6e8d99666f6c3be0e103adeed1aab07fbbe55fcb1e6e710266487027d05a0bcfea449ba7f781e96dc3402651886c65dee2ebf8afafade3609986cca97fd2ce2a34bfd049031dd2e26e77d58affbd50bbf1ba8e543b9b9fb3cfb5ee8c85b90945d8ae76bf6a8a86d43a2c2f00515f56a22d972374e11bb5c7d9ab7088d894378c8b5ec0fbe65edef81ad55df6cff1cd55f37649d5f85135a97e12b3c6c182a087406e97024da3554f91ff60fc259bef51ef1f10ab95021bfdb0a6959bbf5ee779714a876c8875802251113d5c4f61f1014ca7d21eaf48b956123c52006f27067e8e20e543b61f12f3d12a2420206537c19390efa380872dfe7035a10cc9500dca6aeaf652a12f230d2bbc8e934de3cefeb4b7efb910a964fdb5477c3c74b05e6a26f3f7be3d30089cabbf4b39912bb90a41e38a761c51a75e0bc5766cc794b55b127fec099846882b4e82e2ce4025c68a1df9a5d6056b03197e0dd11b5ec239131c41fb42ff60516e0c85972d3f8e64dfe268d4765bbaac1dce56f733d28e8b8d8f95b977db23c3e3ea4b5f6678295a5d95ea700378ff6c0afa896d522696c4c66f86c47dac51d4b4be34a8e4f8df7a7940ff293098d0446fab7b3eb75d21708b20ddc50f017172557ab17209c3817dc4797de81bffabea188b31ee948448891c1b2eb5fa976c078bafded624d852f82d5039d9b176d128f20b91a9d4ddb1e37a41c5e2e1502de4f7260f0cdcb433fd4a57cef3a06029256694e89e7b1d5216bbb4ae36adce93f0b179ecec33f83e310e00e4009cdd6728203a80583b7c8f379d1a648417405ffc985964cefa03b9cc258f961f6aa6bcbe9933c13a3cf983703517a7600542415bf41d1beca2c61f41e5086c0d09a16072b7b68cad77774b5e4f147e10cc0845186f6df4a88f90386d7e7988455925be945d7ab6e4cf3946439f1d663383115bd1da82d0045d0f7742c680fdeb00194c15947aacb12eadf2154317b7ae93cb1fb47e8bda8b9006a3d3ae125442a61ab7395c00eb3a4a9e0b0df9133a69ce6ace93f4ede938be9651ae7c926504ae4bdd0575ae63a5a7b778ea388be73c2764cc10cae17c8dcf60bd03d299527177e36c2b959dbbaacc3babbd7e94df3b7c15e05b8687d234eded0e53536396ccd5f687fa12eddbed5b6b0eaccf3ee637c6bbf05af95a6ea07890b450db2dfa18049e6e4e6cce0a61884a1174270085f8c089d9b9ea45c2548820c87224ecf76070beb73f013b99486163247978e9002a4a49a9fd1e6701b64e9320459022aee42d2dbf932434e451701445937ffe5581ddafade9d2e06d8534f50fd05188c34c38ee24754fd863fb632f489a6f187c40da706aba121a11c9f0bd12d1f7bbfc3dfa4e673d72d5830e5e2e92316343cbcc1dd9eeab23975041b263e86893e3933de2cdd6d99e7e5b3b5f556b181e0356e2a0f01081c3aa47589e7721e22b27b527d4f7a93bbc462023eaf0d13834a05e6172f965c196470fc56e4da97026ec8cfb2b27fff8d6b87676c936661a7e8219815441fe03a9e1b3f0b5ae532bfcf918a7aea7e4e2669af4337e3a743e92a110eb68327365747bdae725bc476bcbf5f42658e9bf405ed2e43d71ea377436c323a53f14af68a8fe27cd309fa4327a5cf9acf7a161da37aecf3d22dddacd5004b6b6248d1a47fc88f3de6529d07b23160db0389a6e471da41aaa8eb86544e808f8d88e8a4a18926bb516b172612da2cb2585e23ae32260aeb789313c1b51e665dcc8364f66c69b778e02ae969c00aaeb8924e1dc6e3c25ea8c2f8af8b787860a27165f3eafa15c6e82a84ad69821990bee56fbed05a4fc706b75f6908c7509e2c648e2e4ac27b786c1c02a8ec48f5a88f3047c3a32b1c281815a53795ba29351565b55e9bbf4e6cfe1250d1ad4e2acd386b7dd215773a20d875ba83e888bb7e435300c7ab8afd3d318c3943b3e46c7f51298ced46e18f330169712d179b600ab31703c493535d83107c22a804d9ae7dd80099bb71eb24684eb73383f3c73616094c058e80c5b24964f37dde72ea5eb5a1cbb5492cb871606fa7c18869e077ba90ece3a1254589ce008a2cb573a8a31ef69798735b95b542ba42679d5fbda16a2f56fcf9c3801996265061c6171ab84955a09e5e5d28afb7fd8fe26f43a0bf"}) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000a000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1746.895103][T19783] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1746.906437][T19785] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1746.918161][T19783] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1746.926584][T19783] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x4b, &(0x7f0000000140), 0x8) 00:04:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000b000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1746.962998][T19842] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1746.992513][T19839] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1747.000975][T19839] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:30 executing program 0: openat$sndseq(0xffffff9c, 0x0, 0x0) 00:04:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x4011) 00:04:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000c000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) [ 1747.035889][T19839] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1747.044403][T19839] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1747.049265][T19861] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1747.118316][T19853] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1747.126825][T19853] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1747.134859][T19874] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1747.146578][T19853] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1747.155082][T19853] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1747.181259][T19839] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1747.189817][T19839] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1747.207076][T19839] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1747.215538][T19839] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:31 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000001200)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000001880)={0x0, ""/205}, 0xd5, 0x1, 0x1800) 00:04:31 executing program 2: io_setup(0x101, &(0x7f0000000080)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 00:04:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000d000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:31 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8904, &(0x7f0000000040)) 00:04:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 00:04:31 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x1f, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000e000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:31 executing program 5: clone3(&(0x7f0000000240)={0x2101000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:04:31 executing program 0: io_setup(0x4, &(0x7f0000000600)=0x0) io_getevents(r0, 0x8000, 0x0, 0x0, 0x0) [ 1747.911161][T19890] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1747.914716][T19900] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1747.919618][T19890] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1747.929349][T19890] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1747.947494][T19890] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', 0x0}) 00:04:31 executing program 2: r0 = openat$sndseq(0xffffff9c, &(0x7f0000000800), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) 00:04:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190011000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1748.002041][T19899] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1748.010509][T19899] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1748.023402][T19914] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x0, @private=0xa010101, 0x0, 0x0, 'ovf\x00'}, {@multicast2}}, 0x44) 00:04:31 executing program 0: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:04:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2}, 0x0, @in=@local}}, 0xe8) 00:04:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190012000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1748.073956][T19925] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1748.095361][T19899] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1748.103838][T19899] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2002, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)=':\x00') mount(&(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='overlay\x00', 0x8000, &(0x7f00000003c0)='cifs\x00') perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x6, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x80, 0x55) truncate(0x0, 0x400000000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x440, 0x54) open(&(0x7f0000000100)='./file0\x00', 0x4000, 0xa0) openat(r0, &(0x7f00000000c0)='\x00', 0x8000, 0x44) [ 1748.156815][T19934] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', 0x0}) 00:04:31 executing program 0: openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) 00:04:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190002000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:31 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x14}, 0x33fe0}}, 0x0) 00:04:32 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) clone3(&(0x7f0000000240)={0x2101000, 0x0, 0x0, &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/152, 0x98, &(0x7f0000000180)=""/36, &(0x7f00000001c0)=[0x0], 0x1, {r0}}, 0x58) clone3(&(0x7f00000006c0)={0x40000000, &(0x7f0000000480), &(0x7f00000004c0), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x804) 00:04:32 executing program 5: clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x58) 00:04:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0), 0xc) [ 1748.280625][T19953] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1748.295455][T19960] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 00:04:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) 00:04:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000001340)=0x100, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000008, 0x40010, r2, 0xc391000) preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000040)=""/232, 0xe8}, {&(0x7f0000000140)}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/14, 0xe}], 0x5, 0x0, 0x8) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xa0c40, 0x100) 00:04:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190003000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:32 executing program 2: r0 = openat$sndseq(0xffffff9c, &(0x7f0000000800), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x4}}) 00:04:32 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, 0x0) [ 1748.421049][T19949] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1748.429670][T19949] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1748.435286][T19991] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190004000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1748.471641][T19982] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1748.505794][T19949] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:32 executing program 5: write$sndseq(0xffffffffffffffff, 0x0, 0x0) [ 1748.514292][T19949] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1748.539266][T19960] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1748.551470][T19978] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1748.559929][T19978] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1748.598100][T19978] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1748.599622][T20015] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1748.606546][T19978] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1748.637268][T20017] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:32 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x1f, 0x0, 0x0, 0x4, 0x4, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:32 executing program 5: getcwd(&(0x7f0000000400)=""/214, 0xd6) 00:04:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001140)={&(0x7f0000000f40)={0x2}, 0xc, &(0x7f0000001100)={0x0}}, 0x0) 00:04:32 executing program 0: uname(&(0x7f0000000000)=""/244) 00:04:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190005000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1748.672680][T19972] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1748.681174][T19972] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1748.698066][T19978] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1748.706492][T19978] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:32 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x20, 0x2d, 0x0, 0x4, 0xfffffffffffffffd, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:32 executing program 4: listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/232, 0xe8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001140)={&(0x7f0000000f40), 0xc, &(0x7f0000001100)={0x0}, 0x300}, 0x0) 00:04:32 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:04:32 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="15"], 0x2c}}, 0x0) 00:04:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190006000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1748.755879][T19978] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1748.764478][T19978] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1748.780438][T20037] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:32 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x0, 0x0) 00:04:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x801}, 0x14}}, 0x0) 00:04:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x404400, 0x2f) chmod(0x0, 0x0) 00:04:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190007000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:32 executing program 0: clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) [ 1748.860634][T20044] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1748.869097][T20044] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1748.877057][T20053] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0, 0x14}}, 0x0) 00:04:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00'}) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000cc0)={'icmp\x00'}, &(0x7f0000000d00)=0x1e) [ 1748.940553][T20044] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1748.949013][T20044] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1748.952708][T20067] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1749.029002][T20044] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.037448][T20044] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1749.084947][T20044] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.093428][T20044] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1749.122184][T20060] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x8, 0x5, 0x48, 0x0, 0x3, 0x28042, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x28, 0x5, 0x80000000, 0x3, 0x0, 0x80, 0x301, 0x0, 0x800, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 00:04:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190008000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, 0x0}, 0x0) 00:04:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0x0) 00:04:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001140)={&(0x7f0000000f40), 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x14}, 0xec0}}, 0x0) [ 1749.130630][T20060] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1749.154826][T20060] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.163264][T20060] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000a000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001140)={&(0x7f0000000f40), 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x14}, 0x20000f94}}, 0x0) 00:04:33 executing program 5: perf_event_open$cgroup(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x242a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:04:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000b000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x2}, 0x0) 00:04:33 executing program 2: clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/152, 0x98, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) clone3(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) [ 1749.258953][T20099] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.267464][T20099] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1749.330492][T20099] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.339017][T20099] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1749.392744][T20111] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.401212][T20111] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1749.429116][T20111] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.437569][T20111] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1749.454853][T20099] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.463305][T20099] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1749.480328][T20099] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x12, r0, 0x9a66c000) truncate(0x0, 0x0) 00:04:33 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:04:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000c000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 00:04:33 executing program 2: clone3(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000540)=""/16, 0x10, 0x0, 0x0}, 0x58) [ 1749.488796][T20099] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1749.511392][T20111] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.519823][T20111] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000d000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1749.558170][T20111] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.566629][T20111] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:33 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x804}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:33 executing program 5: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000800), 0x0) 00:04:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={0x0}}, 0x0) 00:04:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000e000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1749.632708][T20140] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.641175][T20140] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 00:04:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001140)={&(0x7f0000000f40), 0x2d0da1d0b9382282, &(0x7f0000001100)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) [ 1749.685950][T20140] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.694472][T20140] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc05}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190010000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:33 executing program 0: io_setup(0x0, &(0x7f0000000600)) 00:04:33 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) preadv(r0, &(0x7f0000006f80)=[{&(0x7f0000004b40)=""/165, 0xa5}, {&(0x7f0000004c00)=""/62, 0x3e}, {&(0x7f0000004c40)=""/115, 0x73}, {&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000005cc0)=""/38, 0x26}, {&(0x7f0000005d00)=""/127, 0x7f}, {&(0x7f0000005d80)=""/3, 0x3}, {&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/153, 0x99}, {&(0x7f0000006e80)=""/252, 0xfc}], 0xa, 0xffffffff, 0x0) socketpair(0x9, 0xa, 0x9, &(0x7f0000007040)={0xffffffffffffffff}) sendmsg(r1, &(0x7f0000004b00)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0xfa14, @mcast2, 0x2}}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="90c10aeb537ad3a78597d114d76698e9d00d5618f7ee5d1c485435407a20f6b52b585f6a6c7c16734ae00ea0b9666fe0f8d5fa3c6cef88ad8a106fb2363de53e0ba099470bb7d71ee5118efba398d9faa2d0080f0796d61147ef5b32049d6ffd8649f65935d4df49fe4a1381309b10b4d48f9e56884bde38122bd43cae3ca70ba5a8b2b619d29d6aef7f4fd12d701161b14c021063dfb94e2eda324db8c2e978aecd005006486fa6cfc5fda3ea9abf358d04eed2a94560a7b85db818a955f9ed1689f6567c38201c03f8", 0xca}, {&(0x7f0000000100)="83d466d01f98c71d1422104402186dfd62e66d8d7f83b09d850f3192febf8aebb96479fa2ee455e62859abb2765b21bd63ef5759ff47b4262d10e37bc93fe97a7e6c3244877765b54cc1433c2a065b41dc85115d4bd6bc1f791230e1db", 0x5d}, {&(0x7f0000001300)="db3579c40312cf11b63dede15edc40eac2917f1db2c29d0befa0f9cc2d523a873a51ed3c2d3045c32a964064e964e38b65fb25446b15d0a39251a13e903638147781202c9e9e4553911a0450a9dfd1d6b63e3ce24ffc9e16eba63fd60f34b0442bae37c7cfb150e1242116a04a916edf01562d0f7c33836bfc20789562e3193cbc4e745814e3fb85d1bd31709066423940c80a2e7c95a667f1cc5a2c5aa03f74ba0fc84d0192804b4e7e18ecc2088adea8514feb6f607ec690604a1d05a3c4c7f97a5205019b4c2c60e8e88285931531fd306ab4db2fbf8e71e9469612f86511f9161ca358", 0xe5}, {&(0x7f0000001400)="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", 0xff}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="6b4db0", 0x3}, {&(0x7f0000002540)="254c0f2b614141804133aedf3bf1232882c02556b72bb9d02d88e33f29c2ea130160153473519e0a199c6b1d9198ba45ca80552bfac446d8e2331584f81973cdf43a6699670d76998ab5f653e63c41872387eeb9e2805e4863abe32e6bebe088074502ed928bf584056821864430719f5784ebdb6cc6ba4965f6fa08ba1a1cbdfffd0bec29e1eea56fdf1cb79619b85206934a129924b37a81ab06f4d553a429603d3ef08f12b3e2a483403c2091dcc9d9c3cc0625fbca4f1d4ab9b73035345704d99a9016f366fa3eaa", 0xca}, {&(0x7f0000002640)="0415ed11378996ca29f8ee72556585391cad91cf4753048e7e07fa5b416c471483aec503b850f14030cc02694d76addb2e5ba4a8dbc026855659c55bd5f69dc79a6ed226072a83202ee2abef376338c52dfc920cecddcdf0bcfe3728", 0x5c}], 0x9, &(0x7f0000007080)=ANY=[@ANYBLOB="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"], 0x2358}, 0x4004000) 00:04:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) 00:04:33 executing program 2: clone3(&(0x7f0000000240)={0x2101000, 0x0, 0x0, &(0x7f0000000080), {}, &(0x7f00000000c0)=""/152, 0x98, 0x0, &(0x7f00000001c0)=[0x0], 0x1}, 0x58) 00:04:33 executing program 0: openat$sndseq(0xffffff9c, &(0x7f0000000800), 0x0) 00:04:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190011000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1749.861287][T20185] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.869743][T20185] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 00:04:33 executing program 5: io_setup(0x4, &(0x7f0000000600)) [ 1749.904500][T20185] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1749.912981][T20185] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:33 executing program 2: syz_io_uring_setup(0x307a, &(0x7f0000000180)={0x0, 0xb8a8, 0xc}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 00:04:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190012000000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x3f7, 0x8, 0x70bd29, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x80) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:33 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 00:04:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001900090000000a1d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:33 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '+-'}, {0x20, '-\\'}, {}, {0x20, '!:.'}, {0x20, '/{$\'$'}, {0x20, '&\\)'}], 0xa, "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"}, 0x11a) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chmod(0x0, 0x0) 00:04:33 executing program 5: syz_open_dev$loop(&(0x7f0000002380), 0x0, 0x8303) 00:04:33 executing program 0: timer_create(0x7, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) 00:04:33 executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000002f80), 0x0) 00:04:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000251d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:33 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x30}]}) [ 1750.103919][T20226] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1750.112376][T20226] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:33 executing program 0: io_setup(0xe9, &(0x7f0000000200)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) 00:04:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009020000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:33 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x64}]}) [ 1750.181242][T20226] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1750.189699][T20226] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1750.250199][T20236] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1750.258683][T20236] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1750.299807][T20236] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1750.308249][T20236] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1750.325634][T20226] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1750.334085][T20226] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x87b3) 00:04:34 executing program 2: pipe2$9p(&(0x7f0000004340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r0, &(0x7f0000004380)='W', 0x1) 00:04:34 executing program 5: syz_io_uring_setup(0x1383, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, 0x154}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000002b40), 0x2, 0x0) [ 1750.350995][T20226] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1750.359438][T20226] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1750.379346][T20236] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1750.387785][T20236] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:34 executing program 1: socket(0x3, 0x0, 0x7da5) 00:04:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009030000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:34 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:04:34 executing program 2: pipe2$9p(&(0x7f0000004340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r0, 0x0, 0x0) [ 1750.411649][T20236] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1750.420087][T20236] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:34 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001a40)={&(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@flowinfo={{0x14}}, @flowinfo={{0x14}}], 0x30}, 0x0) 00:04:34 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 00:04:34 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x1d}]}) [ 1750.476839][T20274] EXT4-fs warning (device sda1): __ext4_ioctl:879: Setting inode version is not supported with metadata_csum enabled. 00:04:34 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000001c00)) 00:04:34 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 1750.550743][T20268] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1750.559215][T20268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1750.589953][T20268] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6d95}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:34 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000003c80)={0x0, @qipcrtr, @can, @can}) 00:04:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009040000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:34 executing program 5: socket$inet6(0xa, 0x0, 0xffffffff) 00:04:34 executing program 0: socketpair(0x26, 0x0, 0x0, &(0x7f00000025c0)) 00:04:34 executing program 1: socket$nl_audit(0x10, 0x3, 0x9) connect$packet(0xffffffffffffffff, &(0x7f0000003d00)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @random="5a8a3264ec85"}, 0x14) [ 1750.598404][T20268] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:34 executing program 1: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) 00:04:34 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x74}]}) 00:04:34 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, @thr={&(0x7f0000000000), 0x0}}, 0x0) 00:04:34 executing program 0: syz_io_uring_setup(0x1383, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) openat$vcsa(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:04:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009050000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:34 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x94}]}) [ 1750.754377][T20313] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1750.762940][T20313] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1750.814197][T20313] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1750.822660][T20313] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = getpgrp(0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x0, 0x6}, r1, 0xc, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000140)={0x6, &(0x7f0000001400)=[{0x401, 0x4b, &(0x7f0000000040)="17c7ee313fa8780aa43bd2040184422c741250553beb8984bd8b1f8050f5d1ce7467d8d26afaf209d718e8993a6f4f7b0458bcd9c074d18d3e610b3f6a5ae950bdcb27938c2eecf359a478"}, {0x8001, 0x61, &(0x7f00000000c0)="a4d94a1abb0f3038d82cfbce6b03e6eb882f1727e3647f7e75f6880bdec7d4e421effb3d04e3e6316cda0f708841c2b3622da8abee6fa9b00f523793a158891ef0d9eb2324a74764b2266360b2725df8fada0647ef8165a67fd96c936acab9bb9f", 0x1, 0x1}, {0x20, 0x1000, &(0x7f0000000200)="7f46fda1edac8d59a31b5db209dfce202ced911bc5577435d17771af88828afb048c635e082588e81f9e54a65346f67998bcbecc7f550a42aa95b71dd91853792930d662a4867444ce2c1b8085698750d19ad725d81981e39d7c7d64ef8283f60fe918e3e465f448733855ec84b581c0b8a431c622bf91d0150171b111439397d5fc1e373e9b63200b692a63180fb1b7adbc8be1a0be68a488da1398e4f7421775976f8093455603571deba72bda202ab533d2cd0cfd472468c526f61cfd2598ce0028e78ae9b8e179b8bc39dd4a1a2609579f219f980be85315fc0412c135f2b4f1521f85e34982e86976ed08351abad78d87943cd7174071f2cade555071f29ac0608e2c45c87c5cc203b4d70015db6eb8bb1fdc1f0293c4a577c138ae0b245db33ec91ee21240406e99841fa07475290d650bf18579ca1810140c53f44869ff6dcea0494fd4dfdedb124a012683a9df73d3f5d664749d7654bf53efb4a63a238e8b8f07d16196cad7567b371d193f14110562b08cffd7f06230ab86435f506ec0c1cdc0bde5280535360ed36791a9e2edc40c697d43dc2bafa4fd681993f3e322cedb37dca9f2284565331935ec13e5e9fe4752fe40480c2f35d340664a70a5b98b8fa6cd7119b1a727323686580fe88ccc4f7a1617a4d5d35c35c73337c6f743e9cecdcdbc14d002b38265b79b800c6f0182585d0f4551546c5cd8906432e2baf20612b2cea04b4fb99ec3763f6c309ea447bf981fd8ede404c667392dbd865c2765d0ec713a2766fd01e02987f647825b852dd10876a0f3e1f77d1a7a7abc188fcbb1715ee65d82dacdc8f2ad1c0d9e1273fe5868182edd28a804a0d203efdc15c1a263bd18b8d407c833bdd5d227b4a950e67c07330d3c86dffdc1181ecb776f0e8738751f76450983f27cbcf80c2c8d4023cbff90bdbd53102626e1bbd9b94f6993dec11109472f2a67ef69658ebb47a6f5b9bf476ea5aa54b59c2bfcfdfdcce2ac4746b381611cba89c2260214d77fad4e379d871a22583975c91e2e0b06c40aebde37220dff37744478eae58382258a8d367144eee39a9879a7ce10177cef95c8ae6067623cfb9837f9bb1a65b588ff035ad637657145d69ce90e0d6d58852e30787a9891a91de111825f3715267ec7fedbd4c450236a10c3151b3be89aa1e0697753f1df16e0ea2c97d4510844adcba2c8b1cfd828602f1e39e548dd6e2d3eb8c7d5c4da3292ffa8197c40bbabfcf2e0a5f782bd2f9540763ee13286657dc833f9bc48a2a7c0a67f7137412b3183619300028d2f8b515c773ae5bc66dbcdd78ff7aade6cd0075536aacfc02eadaf26cd077b3866c89b1ede0d2a8cf41a4a4e78564f891ec521e172cedb3f0d02607d6fac1f3616b10da2fde81294c3d5a5406b3460a3bc51302ca00673001bcf132d872fbb62d1b2fc9f8ed86cce07525e5c663729998a5417b3cd66bbb3fa16c4429308f76d97970f3bfe816961d3f0442fcc757388de8ca37c5df5f8f79a39a80044471c506ceedee5154949577bfef54b94baf0a4c604a6d0c75f9628abea1df93e79bca4454c73b97b91c9b70cfa4bbf7e7169fc1e92c724a65da615e681b5edd6d89fc3a9dff9f939d6d7039de310cdde52df1ee8ba317569fe3529b4e1eaaa9a3b705d3b839e3ec1faecf459bafc34d2f1e7600f0a591a4f2556f35b784fcc30f80fd9bc94780cf608adbf9d446f51898b20340c6d91cedbb3df51409e6b31ca7f895cc5a5a41ea28aeda7b77d11e8b6e5cb957b1f34ff1fbae11fc15116c80b6ac41d601061575281c14cba6a38a60b4940c4aa00dc648ef73dfb894ef95315267e983f34a9cc50f863b8b0c7f9708ad9bc78cfb35299fd25847e38539e92676afc8eab37c619457b2303fd5e4394df7b692a4fa362235e002eccdaa089828205ffdf88619c1f789570aea49b7fe5a89ee11ee040e5abb236ab2f6c94f94f1954a8ce6d6469640db56b146e6cafe5655171306cc6c10a7c990dec291bab0ea8b216304253cbf48b853a1ec456c25421ed2d50731c6dcbd5954bf53806869ffd83c0bf89703a7754346d336188b6079305bde90c4e9420257349696a9a3650f6800ddd64a2ae080dbde665b7be679e2a87c82c03864c2490d9cb18d83adea5e9b972fb20cd7cac3a047647fb8f28a6bfb64930ed676698012242f0fa699106ae8781a78d451fbb71b9843215d49d71aa64b09d5d61151b9b2c3770bb1144691da90fd22adc56508210b94854dd9309c7c70db9dfdb63661fb87c3ed3118ccbc39bde3add4c42f0fbcbcf351e38fcefb9ab9f89339f15698633486ac568dd12ee9f0b78b6f07ce32c1c987f1fb0c4c6c58ddc865b11e0c65905ac064d176df42c82a1dd1e4bacd653c5f088eb1f673fc99957dd34e923925322ade608e15000cdde91739ce7d6e85c9f4d58f084c604106680df525094e0d5fa4954b516758de033c866c90548cdf6fd76e64c7b6715a2d69ff6979517170742e79b47a26801da9be403afa1c40d1e7ccd25d3d56eb196d019810679e7cbd290f8d1bf4a5b589fce8f05c566735ca0afe2e03569bb1a91cebb8e151f14fb6f500ac4d0810567f134c175430180b8a588d4eeedcdf9fa4ee93e8bf25fdc750a63307b9a6ba69f748be56dc94133b6e8e10536a90cb89715035f883bb9b0d1e839c65884178c12163843dfbedc6c6662e9ecf931bed967ebab18da2c09897a08b19ad0d2bd432b30c11b87bd212a26417c09aa6491ab4c6f95acf180816e0ad78291ca2875a1e945c878e03fd0089b27c3d0528188c7f89faefd72b48192891f08ceb9edead4e059b835ed44bbb4a196410eb8c064fcdbde5164352d8a10c46704eaa001f78910c8b907e2496389a39c4260abf10af68aee07eb58201d6d9aa36972062b59756c34578fa3f140f13bff3fc4595a7552ee5e5db89b53598699d0e9184c7a6bb9b19b9fac1f30c32721b955b6c182371f30eeb960c4fc8f25109270a1ad29cc72e2b3c0e55f586e0b167a81ab2b0ac3116555bdbcd2d430d935d92bd1ffa03a12661f97abedce5a75228a6c6bdc2c21893777c6d5a140d4f707929a5aa80b7528f711fb7d42b783590b8bc2faeeae66c70af23d7afb6321884adfbebbddbbf05d6ee84dd08a3ec3726ad5a6b7b00325655b95e552ab80543a8fcf702d95bb5e9bb698ab27b3633065bfa5b788ee6ab1b0996d363f90ff24810da743475ccf2d59285d802e8281d9606489588cd6bf683752a91f963bcb6df5ddc54a28698d410bc368807b883ff706ca3af0c1628bf25d86d2b437e2f38621c63649937a70d002322127c481a19b277d9746d065c8e2815c883b9644b548da2f63a0f1fe64eb39facbd2bd1066c19d448d60967482977d09b2cd42ebd94039dda772536b76651cb134e5c28139488d7ae5bb0b07695b55a435db25c00ce256e47395313c5d32897b6b383c18a3c08c9d9066884775046f76e050866fa194f8636fbb3d945954053b96d7aa443c97d7702be4f565e97488727247d60c44ef945ba39bff3cc890377b93d9c41188ecbb9c78bb695e5394c68761b08653bcecab6d7040885aacaedce05a89befcb22a4bc38ab0edabed7b7ac8be0a72af04f0e438e61b23b54b61527d1b2200d60cd4081da0969ca9f2553aaa7166f32f09d18026d209aaae4c5fd2b73f07a27b9ea727b807440254df6cabe183865cf10bb1608e8181e7d15d51f249158f1ddfa73eeb7771c44ce2095a762701b72ade2ed35c40adff66c1cdf803b1604270342cca7c391d6cccade0c8547a0eed8016dabfe25d64fe088673230df143e1fb558334030f3a2a57b4747c627735ccfd38a8c9d11f0e3114b214e7e72337c6afdfddadaa73e51be747576bba5bf952aa7f7515cdb09cfde4959ffcdba8091d35a567b9121ec70f782c5d52c7af41697a05e580f44d36d26375d47c8bd782def23dd616f836306a2f37c173b8ce1ed584221d3a742a82468da99c4ae962168f94b172775ab9de9ecb26dbb0bde7636ece802b4663d78dce2b57088d0bd255981956606e9126de5bf71560fcf840ed7e98a2a01fb5cffb4ea1d18238950962b208ddcb6c15e9e70e57a63a95a49c69accbe94d9c1bb1c1992eda24141ddfa87d3f6ad5349d96316f61f2b42b7ed666982563ba4e90b383b0e63c7ee3fb76a1d26e22b2023d79a43463d068f47f962cda25b09d5e6367b02b28bb9fad762e4af2dc63fa450d5e7fa4a5974991f09af179b18820178a52e639865dad731dee40bbd3e3c80290b26ca7044ef0f5a010832fde4187bd9d85b4f94cd55ee6cd32e77d811dc5721e84b4bf1ad97944f26c27094e94d2cf7a68f26dfe898cc7af4ea6c91ac0b9f5aba00f77ab771d24bd5caaed9bd8a106d2fe55deda94b6132b51c0287f566ce6e3dc93f72d7fecce146c82dcecd6420bdc016666b5a4c33cdd53c9ab7a4accebe33f7fe9fa8e4cfc005314d4610dcdafa5fb040ac4a2088c13bfbe6982d7be55b9bc475e42212f5ebe8f459bac493c565b70a0dc1ead5186e2bddd0913c30be20698f88505c5a82ac57ffcfec47ad31291bffa8b06c1225b3d94264ab9cdef89d6d52cfc0e311516d578e575d10a375686bb5ee666738f4d4351dd61aede539d51a8beb2e7672602ed2cdbc1d2aea3ab5ff4b0752d7771fee6e4f27e8461768bccd8af0badc052c15e03fee4b529e796912cb6c8712ec161682a33d7e92c417c435f83d9b556f44622a8a150488fd686a6479df30c4b73f8ccc779df920292b3259a0ecd0a38e77ec26cba3b2d64d7613319aff76c01fb78a6974a751ac3ec3b420d6c959e77177b0bfb294ecd9885401666850d9396d9365f17e3a986d48528698499d030a053c574762d8ce9ad1e212d478a73b64aae3a3014285ff10cb8cd7c39cb98f17eaa4ac7cf3c76abb3e3c0b101e7995787fd3e33283105db90e7e9fb78cd52324056c6f7a641f13406690b3b976e5ad7324633f57ef524dfa73fd5edb72ac0d81a9e0e23aae902c5682ce350d459a4ef654b21798ffe4ae384b1e12403291445956bf19413be182f22c0daf27c03d8c64d6ec9efa9f5db48af6ef4f511d05c60bbc0b2fb59a4e5600a43cccf2998093663c91135626475341192663912eea241fd40140950f657211abf3038d9945aa3691fb5b0a9e93b59f3d7f5e6e8d8c9d0e646eee5cea19909ec9366a4347b6b1e2a3ec7cab1c4430e878d30e025dd3185b1bb97920a047e8227da5826bf627465e7b37e17359eace3569301fec13fb8f2a219c3a6b3f11535341794cfe2a0813cb4ba879d907bb6c0779fc70031ebe127a484fe9247fc9313a93f8ce5008292f53acd6985b60fc3c9f25c23c882f6b17b069105c33b19a26e1cfd9a458d94496e29a181cc01b3fdc5d04b327c485a5e6a988f10a0768dc3c5b79742a01f8f2fd667f1a986ba5d78e51eab96af1e791109dc634441d51ec7e67f06f4af53f737cfef080403d8ba52c3b3a794748ddc7f705c66b73e11243723d7bcf25be9871c19b3fb27f9fccf7bb997a58c08e7e5411bf52a7db8af8e9f65408a68219cb14af89247ae1818a58ac54b69d6c6270d30c1137061706c020dd3e50d33787e18ea7cf8aa885e0ce9968114da00f3358d6dac4c6576ebd171cc11bab7c71badb8abbaed1bc05bf1280bd822705aa23b783ef85430c583c6de484f45b8b52d863f7e7801dbe41575f0836798d1a9117fd1b332480042e0b343f971e8148a6a52f5acfc2a41c21aeb9a0bae26e97ad4112585c718", 0x0, 0x1}, {0x9, 0xe5, &(0x7f0000001200)="68d6c338d27b6953ada092bb6e71c1702c2ee84fc7ab917f4f2ae62d1d795044500f59c237fafe6e2554f3acda13d0516efd2caeeddb7fbbef97f769ce32cce5bb7edf473c5b07bbd4b8e1f684fecdb285a4903ab714fe9e797198090bbfac8e89be1a26ad8bd64fd4347f79f2f81105b9444307bcfd0594081838005f3144948b25a5c3d5e1361f654b474667205ae8bd0db4d855640bb0414412d9878f30d7cb01161fd50dcabfe8b09eb0f476899200dc008efc8a32f76b89148e1da79768371cfb77470aedcfdd7699da0bb7c43033986dee19f473aa42f0f86873f3369be5c717787f", 0x0, 0x1}, {0x4, 0x75, &(0x7f0000001300)="0b01d040c6bab95d7492613a82a011f9ccbf38d65070922e204509566a66680a35668f12933a86933e0066fc3e96b39f5f8b7584db72f26924cff457d655d394dbda681a6bc09a80402381faf2efca2d62eba15006221340c32c9d6474cc1e55d40021be5217590085b3d435a32f2b4a9830fa1d49", 0x1}, {0x9, 0x55, &(0x7f0000001380)="55c8e4d37129c8010ebd481cc20ec0b83b9d8dc6dddfa2a0fa4363b7e80c040edb57a731ce833a0ee4e406b0a7d01da356ce4cfabfc8aa250149b9c6ae75720a4a51d23a623e6f1bd9aff41833874f7e6142503b9b", 0x1, 0x1}]}) truncate(0x0, 0x0) 00:04:34 executing program 1: syz_io_uring_setup(0x1383, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:04:34 executing program 2: io_setup(0xe9, &(0x7f0000000200)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) 00:04:34 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 00:04:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009060000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:34 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x20, 0x5, 0x81, 0x3f, 0x0, 0xffffffff, 0x320, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x4, 0x7f}, 0x19, 0x7, 0xff, 0x1, 0x6, 0x401, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xa) truncate(0x0, 0x0) 00:04:34 executing program 5: syz_io_uring_setup(0x1383, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x154}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:04:34 executing program 1: syz_io_uring_setup(0x1383, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x154}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 00:04:34 executing program 0: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000600)) 00:04:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009070000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:34 executing program 0: msgget(0x2, 0x618) 00:04:34 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000600)) 00:04:34 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x2d}]}) 00:04:34 executing program 1: r0 = eventfd(0x0) r1 = io_uring_setup(0x3b60, &(0x7f0000002680)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r0, 0x1) 00:04:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150881, 0x21) 00:04:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009080000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:34 executing program 0: prctl$PR_SET_SECCOMP(0x38, 0x1, 0x0) 00:04:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009090000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:34 executing program 5: prctl$PR_SET_SECCOMP(0x26, 0x1, 0x0) 00:04:34 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x16}]}) 00:04:34 executing program 0: syz_io_uring_setup(0x13f3, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 1751.108496][T20383] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1751.116969][T20383] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:34 executing program 1: r0 = fork() kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 00:04:34 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x8) [ 1751.166041][T20383] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1751.174534][T20383] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001900090a0000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1751.210397][ T25] audit: type=1326 audit(1629417874.950:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=20402 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x4665e9 code=0x0 00:04:35 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x210002, 0x0) 00:04:35 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={0x0}}, 0x0) [ 1751.275761][T20383] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1751.284190][T20383] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:35 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 00:04:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001900090b0000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:35 executing program 2: socketpair(0x2c, 0x3, 0x7, &(0x7f0000000080)) 00:04:35 executing program 5: io_setup(0xe9, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) io_pgetevents(r0, 0x8, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000380)={0x0, r1+60000000}, 0x0) 00:04:35 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:35 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x15}]}) [ 1751.347432][T20383] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1751.355953][T20383] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001900090c0000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:35 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x0) 00:04:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001900090d0000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:35 executing program 0: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) 00:04:35 executing program 1: syz_io_uring_setup(0x1383, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:04:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001900090e0000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close_range(r0, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:04:35 executing program 2: syz_io_uring_setup(0x1383, &(0x7f0000000000)={0x0, 0x3117, 0x2, 0x0, 0x154}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 00:04:35 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001a40)={&(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2}, 0x0) 00:04:35 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:04:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009100000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:35 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x60}]}) 00:04:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001a40)={&(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@flowinfo={{0x14}}], 0x18}, 0x0) 00:04:35 executing program 4: sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000802000000fbdbdf3f00000000000000000ccc00949868d74532055789e8465e330005001d000005001d000d0000000c0009002303aaaaaaaaaaaaff01000000000000000000000300000006000a0002000000008f6281e6f6f7000000fb9565cf2dcd1bb6cb11da6a7ba6f8d396d4fc1a8a3add5252307b5e6ec0011ec8d6616b3980d23331755a6c02aa4c361981f23d9ef636b8322e3c7447c28bf15e6544f2b9c4d57cade51bfa049426b598971ff91ece267449dff36a"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x71, 0x37, 0x0, 0x0, 0x4, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x6ebcefb0f22bcdcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x4000, 0x100) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 00:04:35 executing program 0: epoll_create(0x5) 00:04:35 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003d80)) 00:04:35 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f00000005c0)) 00:04:35 executing program 2: timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 00:04:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009110000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1751.884293][T20498] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1751.914835][T20498] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:35 executing program 5: syz_io_uring_setup(0x1383, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 00:04:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/77, 0x4d}], 0x1, 0x80000000, 0x7) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:35 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='.e'], &(0x7f0000000040)='./file0\x00', 0x0, 0x21080, 0x0) 00:04:35 executing program 0: recvmsg$unix(0xffffffffffffffff, 0x0, 0xe7d40b3e96df0777) 00:04:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001a40)={&(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @flowinfo={{0x14}}], 0x30}, 0x0) 00:04:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009120000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:35 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4a}, 0x0) 00:04:35 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x3d}]}) 00:04:35 executing program 0: prctl$PR_SET_SECCOMP(0x37, 0x0, 0x0) [ 1752.045700][T20517] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1752.054166][T20517] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009250000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:35 executing program 0: r0 = epoll_create(0x9) fstat(r0, &(0x7f0000002000)) [ 1752.124177][T20517] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1752.132647][T20517] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:35 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000004d00)) 00:04:35 executing program 1: prctl$PR_SET_SECCOMP(0x21, 0x0, &(0x7f00000000c0)={0x0, 0x0}) [ 1752.164738][T20517] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1752.173208][T20517] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x490000, 0x41) 00:04:36 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x35}]}) 00:04:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009480000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}, 0x1c) 00:04:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[{}, {0x2}, {}]}) 00:04:36 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x400000, 0x0) socketpair(0x6, 0x0, 0x0, &(0x7f0000000600)) [ 1752.241965][T20517] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1752.250445][T20517] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:36 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x34}]}) 00:04:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001900094c0000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:36 executing program 1: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000e40)) 00:04:36 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x7}, &(0x7f0000000040)={0x3}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x40]}, 0x8}) 00:04:36 executing program 0: prctl$PR_SET_SECCOMP(0x3d, 0x1, 0x0) 00:04:36 executing program 5: perf_event_open$cgroup(&(0x7f0000001600)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd102000000000000}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1752.391646][T20561] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1752.400112][T20561] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1752.447149][T20561] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1752.455597][T20561] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc11}, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = open(&(0x7f0000000040)='.\x00', 0x400001, 0x16d) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) truncate(0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xc) 00:04:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009600000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:36 executing program 0: socketpair(0x2, 0x2, 0xfffff001, &(0x7f00000071c0)) 00:04:36 executing program 1: socketpair(0xa, 0x801, 0x0, &(0x7f0000000100)) 00:04:36 executing program 2: perf_event_open$cgroup(&(0x7f0000001600)={0x2, 0xb0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:04:36 executing program 5: socketpair(0x2, 0x2, 0x0, &(0x7f00000071c0)) [ 1752.517966][T20561] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1752.526421][T20561] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1752.543258][T20561] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1752.551846][T20561] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:36 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001640)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 00:04:36 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000001600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 00:04:36 executing program 0: perf_event_open$cgroup(&(0x7f0000001600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:04:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009680000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:36 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) 00:04:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) 00:04:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x740, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:36 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000001600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 00:04:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001900096c0000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000004c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="96", 0x1}], 0x1}, 0x0) 00:04:36 executing program 0: mkdir(&(0x7f0000001700)='./file0\x00', 0x0) unlink(&(0x7f0000001740)='./file0\x00') 00:04:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009740000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x1, 0x0, 0x81, 0x3f, 0x0, 0x5, 0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x10000, 0x6f16, 0x9, 0x1, 0x5af8, 0x6, 0x1b9d, 0x0, 0xfffffffb, 0x0, 0x6}, r1, 0x8, r2, 0x8) r3 = fcntl$dupfd(r2, 0x406, r2) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000200)=""/208, 0xd0}], 0x1, 0x8, 0xfffff565) truncate(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='{(+\\)\\\xb5\x00') 00:04:36 executing program 5: perf_event_open$cgroup(&(0x7f0000001600)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:04:36 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001900097a0000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:36 executing program 2: perf_event_open$cgroup(&(0x7f0000001600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1752.938439][T20664] validate_nla: 34 callbacks suppressed [ 1752.938448][T20664] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1752.970650][T20660] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1752.979107][T20660] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:37 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) chdir(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0xe, 0x0, &(0x7f0000000300)) 00:04:37 executing program 0: socketpair(0x29, 0x2, 0x0, &(0x7f0000000100)) 00:04:37 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000001600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 00:04:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000300741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setresuid(0xee01, 0xee01, 0x0) setresuid(0x0, 0x0, 0x0) 00:04:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x42220, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xdc0e}, 0x4005, 0x0, 0x10, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, r0, 0xa) truncate(0x0, 0x0) 00:04:37 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x107, 0x11, 0x0, 0x0) 00:04:37 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 00:04:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) renameat2(r2, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00', 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) faccessat(r0, &(0x7f0000000100)='./file0\x00', 0x28) pwrite64(r1, &(0x7f0000000080)="92e448ffe18437f5ea7696cb874d3e09334248907921d6fe0ced714228f4b9411a8dc12528311e2a755a2f3e5ee918c2a9ad6456c4aeac2ea2ff6c813170fe1ae2c2858f17", 0x45, 0x0) truncate(0x0, 0x0) 00:04:37 executing program 0: rt_sigtimedwait(&(0x7f0000000680), 0x0, &(0x7f0000000740), 0x8) [ 1753.668737][T20688] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000500741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:37 executing program 1: keyctl$session_to_parent(0x19) 00:04:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) 00:04:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) 00:04:37 executing program 0: fsopen(&(0x7f0000000080)='zonefs\x00', 0x0) 00:04:37 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 00:04:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000600741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1753.775790][T20702] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1753.784246][T20702] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1753.815052][T20713] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:37 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) [ 1753.876644][T20702] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1753.885096][T20702] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1753.888884][T20725] EXT4-fs: Invalid sb specification: sb=0\,errors=continue [ 1753.915381][T20725] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 00:04:37 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20044858) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)={0x1, 0x9, 0x7}) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fbfd}], 0x0, &(0x7f0000000180)=ANY=[]) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x400}) sched_setscheduler(r2, 0x0, &(0x7f0000000380)) sched_getparam(r2, &(0x7f0000000300)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xcc, 0x0, 0x0, 0xa3, 0x0, 0x9, 0x611, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) symlink(&(0x7f00000000c0)='./file2\x00', 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4004081) 00:04:37 executing program 0: r0 = socket(0x11, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x107, 0x2, 0x0, 0xf00) [ 1753.926764][T20730] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1753.960538][T20725] EXT4-fs: Invalid sb specification: sb=0\,errors=continue [ 1753.980656][T20702] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1753.989101][T20702] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1754.005953][T20725] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1754.019743][T20746] loop2: detected capacity change from 0 to 1019 00:04:37 executing program 4: mmap(&(0x7f00002b2000/0x4000)=nil, 0x4000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000280)=""/14, 0xe}], 0x2, 0x1, 0x8) lseek(0xffffffffffffffff, 0x1000, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x2, 0x777, 0x3, 0x603c}, 0x9, 0x80000000, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x1, 0x33, 0x8}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x3, 0x1, 0x9e3c, 0x0, 0x80000001}}) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:37 executing program 1: process_vm_readv(0x0, &(0x7f00000015c0)=[{&(0x7f0000001440)=""/114, 0x72}], 0x1, &(0x7f0000002a80)=[{0x0}, {0x0}], 0x2, 0x0) 00:04:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000700741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:37 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000040)) [ 1754.025384][T20702] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1754.034513][T20702] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:37 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) [ 1754.117278][T20765] EXT4-fs: Invalid sb specification: sb=0\,errors=continue [ 1754.124938][T20765] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1754.136927][T20746] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 00:04:37 executing program 1: r0 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930x0}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x400}) sched_setscheduler(r2, 0x0, &(0x7f0000000380)) sched_getparam(r2, &(0x7f0000000300)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xcc, 0x0, 0x0, 0xa3, 0x0, 0x9, 0x611, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x200) symlink(&(0x7f00000000c0)='./file2\x00', 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4004081) 00:04:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'vcan0\x00'}) 00:04:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000a00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) 00:04:38 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)) [ 1754.330875][T20789] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1754.339316][T20789] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1754.384218][T20789] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1754.392711][T20789] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1754.407847][T20808] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1754.417000][T20807] EXT4-fs: Invalid sb specification: sb=0\,errors=continue 00:04:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_MM_MAP(0x35, 0xe, 0x0, 0x0) 00:04:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000b00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:38 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0xf9) [ 1754.439011][T20789] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1754.447522][T20789] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1754.456216][T20807] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1754.472517][T20816] loop2: detected capacity change from 0 to 1019 [ 1754.487528][T20789] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1754.495953][T20789] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1754.531682][T20816] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1754.559128][T20827] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000c00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) 00:04:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000180)="5d4fd7a9e5ecf2142db6adfb", 0xc) [ 1754.561729][T20816] EXT4-fs error (device loop2): ext4_empty_dir:3003: inode #12: block 255: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1754.586919][T20816] EXT4-fs warning (device loop2): ext4_empty_dir:3005: inode #12: comm syz-executor.2: directory missing '.' 00:04:38 executing program 1: r0 = socket(0x11, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x107, 0x5, 0x0, 0x0) [ 1754.659910][T20844] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{@in=@dev}, 0x0, @in=@remote}}, 0xe8) 00:04:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 00:04:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) 00:04:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000d00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:38 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000001cc0), 0x46e, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 00:04:38 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xee00, 0x0, r4) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000b000)=[{{&(0x7f0000009d00)=@abs, 0x6e, &(0x7f000000af00)=[{&(0x7f0000009d80)=""/230, 0xe6}, {&(0x7f0000009e80)=""/4096, 0x1000}, {&(0x7f000000ae80)=""/82, 0x52}], 0x3, &(0x7f000000af40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x1, 0x10040, &(0x7f000000b040)={0x0, 0x3938700}) r6 = syz_mount_image$iso9660(&(0x7f000000b6c0), &(0x7f000000b700)='./file0\x00', 0x7, 0x2, &(0x7f000000b900)=[{&(0x7f000000b740)="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", 0xfb, 0x2}, {&(0x7f000000b840)="96ec11979dd4b7f58f7d31c22fb31c59bbafcfadccf51ddd61a1dc4992f7958935785880d30f0fe00d375442514f894ba98c46d63e767e9c34d811bb01dfba45bb74406743f5282a9a70d011c4c4a4d085376e6aea798c5539b68d7d35056fcf2a93d27e036c67d6862d13cab4dc3296792ea212b530cce8ee261ab3922851454164da", 0x83, 0x8}], 0x1, &(0x7f000000b940)={[{@hide}, {@map_acorn}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@gid}], [{@obj_type}, {@smackfshat={'smackfshat', 0x3d, '[-'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) r7 = syz_open_pts(0xffffffffffffffff, 0x101080) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000ba00)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000200)="9c208faf405c110082e054760aace2e5a6a180c1f891c6832c6e18a2a9b00bd2e9dca8dce1f626d443ee72ee6ceee1e5029256566216d3c6c9d3966d6f9beb1ce8ce18a533901bae3799614c55e4841ba8bc760ed0b24d92c41f0a2795bcc2a4f59b953bbd34f13ea8f99bd3db61df3410c194e90a7be1ed3c42f92a84d02100399a869f6aafd1f1f9110e0d8d3a565b3a4f291a4be6aa7a7d5d0e1c4c49926bb9233c93d7816649a9020ab689fc0dd25605e5f14e0debf0d2e43e8c77198cebea0250292b17452ed9619c2020391e496c70630c7f47f8306875d48e0244ea3719dd7388", 0xbf}, {&(0x7f0000000300)="5cc293cbbf42fd172dbf4e16dca18a0b14a37c34845cd113c18d5ad352259890cee8418eef57af27b6f901090ddb0b77137406e5baf9b09691fcdcc07ee782046a630cc4861153a8b04340348d52c30e07ee29e87da915d926e8ad4aebccea66cebfbc8a31e8353d39115ba3d7a6937cb3365719bfa0e192fd585310e37aa417c3bc39f3b1055d73cb6810f66910463f09bb594801c6ddebeb1c89454cc9ce0af5546cc3575cadd74d5374c599a7a675b9b349d3596471d6bae9ca70a19119117ecbffd125d4d78629b9cb5748ebde698f72324ffe70e17b3f3d18f0da061625d4d71e8342537ff8", 0xe8}, {&(0x7f0000000400)="deb4a0421555442b0a7f9084b1df47007c5a8176d1deac879093c146d8bf34093865f87d684fb2ac2d86e0283ad88484f8640b40301281a82a467b97e338530d017a930b6e8ee89154d49a458daca4e3c4d5976a5a0b7d0fc82986d04f478b06f81ffe5bb5523130cffaddcc194426c33f5393327443fb21304fb783fc21cb772ebbcdeeda6bee5de4c519da5aa00ae334b893ff948bce236c83c6389ed814097441284432d5dc9d6210305da811edd85f371a82f72e47b5efa7c3ed7e73e0a7629d95d3c8ead933f348c9bf1c6b1af829c355ad521496293ee88d7e7760d84154deacd59ed62666e1977c7bc54f0714", 0xf2}, {&(0x7f00000000c0)="11880d062a6050158c00d101fa55e7036217d1490813748032f43092", 0x1c}, {&(0x7f0000000100)="330e67533998b9e6dfec2f701bc7412cf14e3bbaa3dddd54b292e3719c10e65ec71151bd629c83eefb91de6a764672f63102f6bf3445a5b732659933627f2546a86d6d0bae08ca731e06b6f0b8242abd0600e02e997f53b260a0aec2cf84b5e17cc0ee8111732de7279c1a2f21c84d4a68", 0x71}], 0x5, &(0x7f0000000700)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100, 0x24000000}}, {{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000880)="08aeec7b90afcc95a16ea1a9efd38286ec38b2366e21710186", 0x19}, {&(0x7f00000008c0)="58743b5373848f3850f8662cbe7bab19d580c7e2eece0f644baf36b566609449ddd83349427cdf7d1195f7ae892229e4bcca5c1fa213cce895334ec3e6a5990e77e4d9bc828ea70b64ad3f3859f702eba87043c1fe874a0c392a1fe1ea868c08d86c4d68b5f59eb89c411ee40f5f4bc27cdfe8ace3a7361b3f4860e73b9c951caa60c13a49853fd3ecafde3c5839a07a3f5a6602665b01960de5dcd9c8bac46350c1ec5637", 0xa5}, {&(0x7f0000000980)="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", 0x1000}], 0x3, &(0x7f00000022c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x2000c001}}, {{&(0x7f0000002340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002900)=[{&(0x7f00000023c0)="a02fd781f5a7fd1929c7aab5dea954cad0588583197d68ade3012098877d7ec5d24f4fcdfa12007353696675c26032e1ca46c4c994e9e47561b9e8519d2058bd56020ac947d03e4fd8afe9329ea20ad19cd060f59c30a4031f3d016b5cef6d540b698b9b44fbe737c2830608537ce1056be8a1723f704aae33718e512bad159839f774f8bbf401d583e381b9b15f197414260a17b2e967d52ac62b4b9a8fa771de2fe5c7016427389e82e93ff8b94be4ee98885a626b2cd85ef557815d4c698c2768c7a8728c58616f284123a3bf70efc349168fb5dca4468ab1fc", 0xdb}, {&(0x7f00000024c0)="7e9b4083786b9ae326e425aeebce04a767994f90a4fabfcc34f2f2d59f6be1fe1b15302abce2627b1802f1517bbdc7db5663f4f6b081b51e9c9ce0", 0x3b}, {&(0x7f0000002500)="28f69e790cca31fd275d61dabb", 0xd}, {&(0x7f0000002540)="056e4f65fe83c6bf23f83412e8d120e4b10ae7aaa943fab511dcca673c18be3cf4ae6f178214c203ffd47ef128c8c2a4344de22ebade0eeab11b36dc75b8c8086b883507f5", 0x45}, {&(0x7f00000025c0)="16dc077583ab2eff57eea36fe749a4b2b3b97b6a962cd3ec254839f8a5c116d699b56e843276a553a880ce7761ec7ac6b9a34a478571e320ec8df8d1b3af3a12db94a842f02f710c0ee0091801c96be4e39663927239c5f492813753cea2ea5edee8edc74fcb5d49040a1bda2d3375d75ac854311d32ea35cdc82170f58aad08e37ab74d7c6b769af9c04573ef281c34cc49dac74a27b61f4302d4d4aaa492fff4dba67de1bc11c825422ddeb1412cf988be39007aed82972949d53a3e7826fed4f4e5a7845d72239d049bf8f74cdf0d9544d91dca6ddd89af68642facf679156f9fd18b5e8e", 0xe6}, {&(0x7f00000026c0)="0f8910475995b7aafceea7b9d37ea04d8918b2873f6227681ac91ade95515085ea4d085645805bf9164f5bdfe921f0608acf6db6ab13399b972edc237f7d710c7d058ffbaf8b5da6d80546331ca943f6b3526a48c1e216f75ea7698587dd3f105ae2033b3e4a7e0ec2cb6bc5f737c588f0e67400a23caa552d459603018bf0a2a71a714a439ba552dfbe70aad0840ea91e7f3001374a28c1c19d7ff7487d84c47439ffa0db51ae6d0ab356d065ab6e5445a4340c78827e", 0xb7}, {&(0x7f0000002780)="38bda2a8146bac8ffb3d724d058b4c3c16a522e0b5879632f128c8d1e2d52d05c3b1", 0x22}, {&(0x7f00000027c0)="d2a8e415beb7e3c0e1fad90a566f2c76ca049eea889c479fd9c937ccf36ad8be87cb7e945968d8dc9088a1c3dcda4c53a90d727d07f7da4bd64798ce87", 0x3d}, {&(0x7f0000002800)="96ec02257db83c8985c9f4847299da56bed54f4c8c1c04a3532e29382cffcdd2fb473478b1b061251566ff6bf4e2bb721f7c9588a4bdb28a3124ca2e0ef5c0de90d8e20c4956ac93322d3a1c224e8f49c84661d8b59b25615b16384e16f3f78fb32b60cdbea455ef64d097dbc3d7edb138dba0bf33601a345bc164f0e750242d8f7795e01c7bfe04cc0b0923f0db696a12bc45edafdbee2d42154ca3864172ba4f5d5da6fe77", 0xa6}, {&(0x7f00000028c0)="038b957282963a95a3005e9e27d02bed78148ce103", 0x15}], 0xa, &(0x7f0000002b00)=[@cred={{0x1c}}], 0x20, 0x1}}, {{&(0x7f0000002b40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002bc0)="e7c5113c380f1260560d09630c6abd829e6a6f36651e7e285bed", 0x1a}, {&(0x7f0000002c00)="49401590c061b8921903724bf418f7603bcdb125b5a5459aedc31b0104c31ce0ec7b628cda4f5d2e26e20684ea4e3f12efc593f13bcdcca04ea21c4a2f3aadff2c315690e6205cfbe5ba50d3c395b4820ed7f0d2b60489a9ffb05b3040399ac88d43dc4db4a203f5", 0x68}, {&(0x7f0000002c80)="0d13c58387cf72081c57952dc4775afa409166625ffe75e6d9c384462ae8c82c436a58e272d381e3d9d04e", 0x2b}, {&(0x7f0000002cc0)="440595ecc8290ba45067a68670e48dc3aa6d8e5865587fad71502bd22200bb6795b13a6e7ee94bb534925b9d2b587fe2caff07c88c1d5fa1457867b570499988ad1f365d3d30ded56ba8bd085ce42334be11fe98acc29bee92867f61832e23ddcbbbbaac690b6dfff680bcc8ef093fe0c5ef02c8a948c078c9cb9775e59f2959361c3e9e1397000a0c96aa99bbf84d40bbe580011d24f9980e2805d44428720426e6474af364aea67dd9e0262d4292ab197085f9ab0a87297edc4a0af7a3aed0273e2864e836ca2b651197576c6b2a904addf126e0a3d370dae37c45a9288fe59d1dba0261a70827a1fdcd4f15", 0xed}, {&(0x7f0000002dc0)="2b0dfe2cb962ea33357551c9017d9edd6a7d4084be4828e1e609dfbf6c9eaf6803b31545ed5f508543d5eae3be45059a507888f554911704b70046de63f60774c3b0fc7db5d6a46add305c49b81ab7a3fcf07b0a0628cd23f9bd46497ec9636301e18ddd0cc880ec3858a89424fd2b8e23b827a6f587b468529d93a7698e0ca933604de5011acb44fe95e481990c08cf42575e7af3f2e97f79296a571fb9aeb663472bc38f0252f33098cf21d9dd30897f6c1a4a06169da3b2f5ee16117d3884647cf351ae00cf6b291c43505c", 0xcd}], 0x5, &(0x7f0000004380)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}], 0xd8, 0x8000}}, {{&(0x7f0000004480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004500)="c3185d00d9a1cae6e7a0bee5c20de75fb6ac7a84be050d92d453fce8548620cac6a650879079919211e16b5c1e230218bd1c66de8f9508d15ee2caeaceeba643064acc35274b3c251e7ae3cc7ec0908b62fde8ecfd4112cfd2df1be08cbc58e8d4d5b8762f37d3fc10d83a88a69575e9c77a61a111989c7d78f4c3ee69c112705a113830f378dd93395a959e31ee6a6326749db82662b5395053601346bd3a7d992ef1e0a251f3223399b1b09837b67b3e45bd05f5db7a731fddbb484981b768b1b2744447580fae2225a4a4909b044f232635c76c32c2dbf0a3346baaad55ab", 0xe0}, {&(0x7f0000004600)="29e12ed9d1ba2bae5986ed90e15094d6ae89ccd3fae8be31fe972ba32f3b93435c89ca88d636781d893b948f2023b4bd32a0be676e", 0x35}, {&(0x7f0000004640)="cc3896772ab8389c6719281b09464e093f90d13ecab4d21ca92b8efe5c5da85279ccd4eb32eff53bb74c250acc0b43b1783cc5826454e0b60b4cbb", 0x3b}, {&(0x7f0000004680)="5be8f640894582085faa5a5da71e72c26a531ddc9544bde42453ac9d1311520630f042d6b5c6", 0x26}, {&(0x7f00000046c0)="c36c42d6bf9b24a802c70b3192d098233b95c07f9e8261c5764d6ea2b972f5b26b929b13205a875c5bcaf0a157917517ba598f156c576e5349a157acab84cc590a7904b78573cf332ae297c0eed995de3b1bc9e0a1df97f8e1676ef2549d194d4a364a028223677a3111daefa180e61e75d8058a5bed56da547146bcb9b08bc832a1a18ca13ae816f599f6ceb9d259eb98755c5be74548a1f6c9eb4d6525c81529df28b5b27b32f0165c60bec0fe892507907857e28977af11ecc0cdbcb59059c235cf118f0e073e9db99d46bf710fab5027fba764", 0xd5}], 0x5, &(0x7f0000004840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98, 0x28044}}, {{&(0x7f0000004900)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004a80)=[{&(0x7f0000004980)="593e71cd7c6e9c1c7c5c2d90fb0cb3546b0b010aa96d530ad2414eec54f649f8b87dfb60b05b39b6b3ff4b9c1bbec40798095aca2d83e6661a0d31e3e592cc5cd892366a8a4ecabc3ae85e7f555a460300614738e33a60a3d4d247d2ad53fc0471e957e85799108b28640610089c19e55ab15bc8684c6e59f072ea299a3473d5439037a65d16157a3a7dc467e903b064a842cf19eeb74a5994499001c4c1784edac830b6e0853bfbd679c7d1ceb6d0c5ff9a7114f638ddf137022f83bb617d8b1e76edbdf4a324eb292cd0c37e39ad6882ce4ca8f2338758182ada27d8f4905c4dbbacac4982c9a6d3266bd46229b95c", 0xf0}], 0x1, &(0x7f0000008e00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8, 0x8040}}, {{&(0x7f0000008f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000009300)=[{&(0x7f0000008f80)="61a2b681336415a18869f7e526fbe2737eebe3eabc802cd8", 0x18}, {&(0x7f0000008fc0)="0e557ca6d3fb7738caa2da3cd45fe12b48bde2aedbdb8f7faa4a5be66ef2e64cf03c08aeaf1c847c1e6d8484b34bf812bc10617de73cee458ddefb5498ded611da7a76a96f92b6fe7f8160023452baef487b32fe852d41dd53bd6c2dbc37bfe4b00275f5ca9fceab454fb4183786c7cff525946860f16c05b7a03e4dd42f1f113f70f693e28179dec6a04d7208191ff01484eb261ab3c080ea", 0x99}, {&(0x7f0000009080)="8c4747dbbefdbddb35f26848fd681aebf2faa4f5057c8b23ec71207dd062e7fb8e0e8e3ecd92291c3b0b296809d3935e1b855fb7ec8da7ba7b7deca3758bbdb730f2c835351e0169a2343cc5f1c7e92a69c1c91ca3daf8492e27d42a4ef78835aa5498cb086bb3b73a86", 0x6a}, {&(0x7f0000009100)="4cd5a86f0e9c3fc6d87e3749f4cb21da980ea0d207e0fb6be02083fd214a15a6b652af5556f5fe554f4d41db15bc10de37f04f952f025f433f92331e466a231cf3950dbb603bff54a1adcca1c88172350057f9834cfb6500823b9738ecde3605c08a49eb5ee4dfa61c945bc4e40f6ac4f5a62c97cddd17188c60dfc434cafc36778286e9562d544423e504406f0582dfde1e82887f7c1349ca14d6834f896689c783a35033e849afbd84fb89240db99c5b4ff065e85bb1e3", 0xb8}, {&(0x7f00000091c0)="b274b4415ca9ec5183d4a262dca157a329f0b0f037236ab1b704f100625c31f4e3b070a5eb5f14b8868589e46efc35f1c4bcc5cec7be21c70197ea335709b514ade5c3b9b8f46a524e412c3a7b59452328ee8c60024e109609", 0x59}, {&(0x7f0000009240)="56ca5dfb0c5d5cccef0671ee4d9205a76cedb68bafd8d637bfc66393bbafc21e9bfe6666a37dcb3e43424c91d7ff27e8863f2105b10a2955e09c206ea6f7f94955d04780c819004c15103c2c5864774423e3301772c76b888160a7f83cd1aad51cafca437849602ed749795a778fe099287a0a471cb37a57db32cb1a64c06708cfbacc5497f76e84043fe152d5426ec48e7bc89904c42ddd23f5f43fdb1018994b25b34f9b58d0530851748777", 0xad}], 0x6, &(0x7f000000b080)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r5}}}], 0x148, 0x80d0}}, {{0x0, 0x0, &(0x7f000000b380)=[{&(0x7f000000b200)="bc518f7a3ae1da36ce7195dfe6035f1b775140a60a892b61adedefc8508f58a7b298b10c8ecc862ae4df0448d84b62b86d4e78fbb312db4e78ab66200fa3ca02cac8c4477b981ca4dfb7ace4e905aa76a1294a4f6f47c9b863385ad2a2d8e89736748a", 0x63}, {&(0x7f000000b280)="3b2d0b3dbbd4b6d30fa30f07a44b9515c65e62f5ea9074cba21bd8a0cd1a61a9a4d85d4a72ba2b0baacb3dc9fdc1de77c693a3ff3761f4395b6d32a76d3baa84231e97cb1f26f3f74549a8bcd454e9b5e9133e4760b523a0b9d1b14a677115f433a6ef53d0a7e70b2029656526d6383f14f9e23378508212e2aa1e6edc7f527cc1addaa91b9d7ea84744a5249bc3e86953640a59c1305748a3bb01acdc7c060dd31d915bebb801ba56bbd6000b0570ca7c3b99b8e9177fced8dbb785615a2d7493f8158356cef30c8f97ab22b977cd0b63375304", 0xd4}], 0x2, &(0x7f000000b3c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x20, 0x4004000}}, {{&(0x7f000000b400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000b680)=[{&(0x7f000000b480)="c889551842c4d5eb8d063467c1b5c80bf7dd250f3528637d771173f8cb5ec42434b12215a41acfa8b13f3cf308d2dfd2d75da1170188d47c13b693fb0f9578475e9b01829fd223705a3ed19de79a0caa9b08c3e3338fe4a193426be142b39650cc649a01af0f8fad41ade105c6ef486c86d05fab0a099dae63c06032ee91050f0e285f4321c564700d8e944e9a43318f590aebe0558748880e00e96b3d8702ed", 0xa0}, {&(0x7f000000b540)="8e1f5bd067d4326240ef39e336d7d059cfd848b06669884f918bef217fede9b1ac215342b85407d88237d823099997baa84926e426bb6805a640a0934769204c1d24c4c75e2f818e3311dd00ef0e27a64f38d6d3edf3d2be3d572a3efc98b4a567c79402b7c9e0e81d97708fac681919aec0f45c87f81bd2bb92a594cc53d02987c8a377dc782b244e47440a2b454355ec186ee393ef2cd85897e8898cb6c0624b8ea2b21ecc83fd5cb472ced2190074e91ad647aec49a130ccaf2d7c87e52dbd386429788ed28583140a4a981e141303d1c87b05cc8a35785", 0xd9}, {&(0x7f000000b640)="ba26b2db097747d29b6f423726c591903d710261bab1546cd1abb813b86c320e50b54d023129fe431cdcf7b6d27f7bcf63a27e8d9260d1a538", 0x39}], 0x3, &(0x7f000000b9c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r6, 0xffffffffffffffff, r7]}}], 0x20, 0x20000000}}], 0x9, 0xc000) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x0, 0x8, 0x8, 0x3, 0x0, 0xfffc}, 0x0, 0x0, r8, 0x0) truncate(0x0, 0x0) [ 1754.726696][T20816] EXT4-fs error (device loop2): ext4_validate_block_bitmap:399: comm syz-executor.2: bg 0: block 3: invalid block bitmap [ 1754.739422][T20816] EXT4-fs error (device loop2) in ext4_free_blocks:6037: Corrupt filesystem [ 1754.751953][T20816] EXT4-fs error (device loop2): ext4_free_inode:353: comm syz-executor.2: bit already cleared for inode 12 00:04:38 executing program 1: r0 = socket(0x11, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x107, 0x16, 0x0, 0x0) 00:04:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000e00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1754.810945][T20859] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:38 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000300)) 00:04:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x40042, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x2) 00:04:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x5452, &(0x7f0000002680)={'bridge0\x00', @ifru_settings={0x0, 0x0, @te1=0x0}}) 00:04:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) 00:04:38 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000023c0), 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000180), &(0x7f00000001c0)=@v3, 0x18, 0x0) 00:04:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20044858) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)={0x1, 0x9, 0x7}) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fbfd}], 0x0, &(0x7f0000000180)=ANY=[]) r3 = getpid() ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x400}) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) sched_getparam(r3, &(0x7f0000000300)) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xcc, 0x0, 0xfe, 0xa3, 0x0, 0x9, 0x611, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x3, 0xff, 0x0, 0x3f, 0x0, 0x80000000, 0x11400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000180), 0xa}, 0x10, 0x0, 0x800, 0x4, 0x0, 0x80000001, 0x8, 0x0, 0x54, 0x0, 0xffffffffffffffff}, r3, 0xf, 0xffffffffffffffff, 0x0) unlinkat(r2, &(0x7f0000000100)='./file0\x00', 0x200) symlink(&(0x7f00000000c0)='./file2\x00', 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4004081) 00:04:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009001100741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1754.901347][T20875] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:38 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x556) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r1) io_uring_setup(0x2b07, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x2}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 00:04:38 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0xc0189436, &(0x7f0000002680)={'bridge0\x00', @ifru_settings={0x0, 0x0, @te1=0x0}}) [ 1754.959769][T20878] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1754.968249][T20878] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:38 executing program 0: futex(&(0x7f0000000000)=0x2, 0x8, 0x0, 0x0, 0x0, 0x0) 00:04:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009001200741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x4020940d, &(0x7f0000002680)={'bridge0\x00', @ifru_settings={0x0, 0x0, @te1=0x0}}) 00:04:38 executing program 2: r0 = gettid() process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/74, 0x4a}, {&(0x7f0000000080)=""/209, 0xd1}], 0x2, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/81, 0x51}], 0x2, 0x0) [ 1755.026105][T20878] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1755.034653][T20878] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1755.099081][T20878] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1755.107548][T20878] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1755.133683][T20878] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x1f, 0x18, [0x3ff, 0x5, 0x10000, 0x10000], &(0x7f0000000040)=[0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x5, 0x80000) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=@getpolicy={0x1d0, 0x15, 0x20, 0x70bd28, 0x25dfdbfe, {{@in6=@remote, @in=@remote, 0x4e24, 0x0, 0x4e22, 0xfff9, 0x2, 0x20, 0xa0, 0x87}, 0x6e6bb8, 0x1}, [@lastused={0xc, 0xf, 0xfffffffffffffffe}, @algo_crypt={0xd5, 0x2, {{'cts(cbc(aes))\x00'}, 0x468, "7c8d6e1ba7f455168a73ac6c147cea2c7faa3833b8013f8b2b771acdc5fbef1c2b3675d437322d8e1d643eb440e23afbe04d34b82f9c8a2f0d43e89b777706ae055da6ec43049c3aa90392101262cc6e16f8bea844e519ae1b1f2166b745e352cab08b5d2ab6c79792602393f15dc8abf43117f168b16420cda951fb740b2e08db4fbf22d5de77dd4ce8a39545"}}, @coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x25}}, @algo_crypt={0x85, 0x2, {{'xts-aes-aesni\x00'}, 0x1e8, "cf0744dfe645af9350e7790e39e5bda2cd2623a8f0a62e5cbc1723050eddef7dde31eb64111548ef464a01ebb5e28e51266ca9e822f83830315bab403a"}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x30, r1, 0x8fe8a000) truncate(0x0, 0x0) 00:04:38 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) 00:04:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009002000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000140), &(0x7f0000000100)=0xf) 00:04:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x7, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_RULE_HANDLE={0xc}]}, 0x20}}, 0x0) 00:04:38 executing program 1: keyctl$session_to_parent(0xd) [ 1755.142128][T20878] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x8910, &(0x7f00000002c0)={'ipvlan1\x00', @ifru_ivalue}) 00:04:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009002500741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:39 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3f, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) [ 1755.232241][T20927] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) 00:04:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) 00:04:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}}, 0x0) [ 1755.280973][T20923] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1755.289420][T20923] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1755.353190][T20923] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1755.361665][T20923] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1755.374159][T20927] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xdc01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) recvmmsg$unix(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/62, 0x3e}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000280)=""/186, 0xba}, {&(0x7f0000000340)=""/98, 0x62}, {&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/84, 0x54}, {&(0x7f0000000640)=""/51, 0x33}], 0xa}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000000880)=""/146, 0x92}, {&(0x7f0000000940)=""/79, 0x4f}], 0x3, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/36, 0x24}], 0x1, &(0x7f0000000bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000c40), 0x6e, &(0x7f0000001100)=[{&(0x7f0000000cc0)=""/12, 0xc}, {&(0x7f0000000d00)=""/214, 0xd6}, {&(0x7f0000000e00)=""/209, 0xd1}, {&(0x7f0000000f00)=""/182, 0xb6}, {&(0x7f0000000fc0)=""/106, 0x6a}, {&(0x7f0000001040)=""/189, 0xbd}], 0x6, &(0x7f0000001180)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x4, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000001300)='cpuset\x00') 00:04:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009723500741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:39 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f00000023c0), 0x1a440, 0x0) 00:04:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x420, 0x3f4, 0x1}, 0x420}}, 0x0) 00:04:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x8981, 0x0) 00:04:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) [ 1755.423187][T20923] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1755.431715][T20923] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1755.449148][T20923] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1755.457590][T20923] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:39 executing program 1: prctl$PR_SET_SECUREBITS(0x1b, 0x0) 00:04:39 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x2, 0x5, 0x6, 0xceb}) 00:04:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc05}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:39 executing program 2: syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x141200) 00:04:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009004800741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:39 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 00:04:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) 00:04:39 executing program 1: ppoll(&(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x39, &(0x7f0000000100), &(0x7f0000000140), 0x8) 00:04:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) 00:04:39 executing program 0: pipe2$9p(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_ROPEN(r0, 0x0, 0x0) 00:04:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc) 00:04:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009004c00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:39 executing program 1: r0 = socket(0x11, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x107, 0xe, 0x0, 0x0) 00:04:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xfe, 0x0, 0xfc, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xdc09}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) truncate(0x0, 0x0) 00:04:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0\\']) 00:04:39 executing program 0: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_setup(0x0, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f00000006c0)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fbfd}], 0x0, &(0x7f0000000180)=ANY=[]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sched_getparam(0x0, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 00:04:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, 0x0) 00:04:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x301}, 0x14}}, 0x0) 00:04:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x0) 00:04:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009006000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsync(r0) 00:04:39 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f00000007c0)='./bus\x00', 0x6ea42, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xa00}], 0x1, 0x600, 0x0, 0x3) 00:04:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000040)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000380)=""/151, 0x97}], 0x7}, 0x29aa}], 0x1, 0x2002, &(0x7f0000000500)={0x77359400}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, 0x0) 00:04:39 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x541b, 0x0) 00:04:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1}, 0x4) 00:04:39 executing program 2: r0 = socket$inet(0x2, 0x3, 0x8) getsockname(r0, 0x0, &(0x7f00000000c0)) 00:04:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009006800741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:39 executing program 0: r0 = socket$inet(0x2, 0x3, 0x8) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @local}, &(0x7f0000000040)=0xc) [ 1755.938601][T21041] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1755.947083][T21041] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:39 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x541b, &(0x7f0000002680)={'bridge0\x00', @ifru_settings={0x0, 0x0, @te1=0x0}}) 00:04:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009006c00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, 0x0) [ 1756.027124][T21041] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1756.035614][T21041] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000200)=[@mark={{0x14}}], 0x18}, 0x0) 00:04:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009357200741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1756.078949][T21041] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1756.087394][T21041] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1756.122507][T21041] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1756.131021][T21041] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x100, 0x80) truncate(0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x60) quotactl(0x79cb8e88, &(0x7f00000000c0)='./file0\x00', 0xee01, &(0x7f0000000100)="ba670d5872cab722cb992d8ccdbfe30f998818edaf3c853fdcb62bbee9a1e56681b3866802040c9055158419e2f3c0319e39") 00:04:39 executing program 0: process_vm_readv(0x0, &(0x7f00000015c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001440)=""/114, 0x72}, {0x0}], 0x9, &(0x7f0000002a80)=[{&(0x7f0000001680)=""/90, 0x5a}, {0x0}], 0x2, 0x0) 00:04:39 executing program 2: perf_event_open$cgroup(&(0x7f0000001600)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:04:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)) 00:04:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009007400741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[]) 00:04:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009007a00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:40 executing program 0: keyctl$session_to_parent(0x10) 00:04:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}) truncate(0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x101000, 0x23) 00:04:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000200741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:40 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) mlockall(0x7) socket$inet(0x2, 0x0, 0x0) 00:04:40 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0x1, 0x13, 0x0, &(0x7f0000000300)) 00:04:40 executing program 0: process_vm_readv(0x0, &(0x7f00000015c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) 00:04:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000300741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1756.321733][T21108] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 00:04:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}}]}, 0x33fe0}}, 0x0) 00:04:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[]) 00:04:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000400741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1756.385187][T21123] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:40 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0xc020660b, 0x0) [ 1756.438021][T21133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21133 comm=syz-executor.2 [ 1756.477143][T21100] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x70, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x106}}, {0x8}}]}, 0x70}}, 0x0) [ 1756.485640][T21100] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1756.506007][T21142] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 00:04:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[]) [ 1756.602784][T21100] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1756.611292][T21100] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1756.629505][T21153] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1756.641342][T21110] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1756.649762][T21154] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=21154 comm=syz-executor.2 [ 1756.669186][T21100] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1756.677606][T21100] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1756.680331][T21160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=21160 comm=syz-executor.2 00:04:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x80, 0x1) 00:04:40 executing program 0: pipe2(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 00:04:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000500741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:40 executing program 1: wait4(0x0, 0x0, 0x4, &(0x7f00000000c0)) 00:04:40 executing program 2: memfd_create(&(0x7f0000000000)='^r\xcb\x9a\b\x17\xaf\xeb\xa23\xe0~]8', 0x0) 00:04:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) [ 1756.696877][T21100] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1756.710256][T21100] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x5, 0x5, 0x6, 0x6, 0x6}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') dup2(r3, r4) 00:04:40 executing program 2: unshare(0x28000400) r0 = mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 00:04:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000600741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:40 executing program 1: r0 = inotify_init1(0x0) close(r0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1756.804579][T21176] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1756.821381][T21166] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1756.829919][T21166] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) 00:04:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000700741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1756.872024][T21166] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1756.880476][T21166] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1756.974566][T21166] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1756.983041][T21166] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1757.006757][T21201] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1757.036655][T21166] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1757.045184][T21166] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:40 executing program 2: r0 = semget(0xffffffffffffffff, 0x8, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 00:04:40 executing program 1: r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fcntl$setsig(r0, 0xa, 0x0) 00:04:40 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000800741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1757.153142][T21200] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1757.161527][T21200] ref_ctr increment failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000cb0b6db6 00:04:40 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) 00:04:40 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5421, &(0x7f0000000040)) [ 1757.242574][T21215] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1757.251038][T21215] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1757.253599][T21223] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1757.287663][T21215] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1757.296110][T21215] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sched_setattr(r0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x5, 0x0, 0x6, 0x6, 0x6}, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:04:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80000, 0x2, &(0x7f0000000300)=[{&(0x7f0000000280)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="00000000000900000c000000dff4ef821ec34de5a68f275e28ea4831010040", 0x1f, 0x4e0}], 0x0, &(0x7f00000001c0)={[{@lazytime}]}) 00:04:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000900741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x95a4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:04:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=']) 00:04:41 executing program 4: socketpair(0x10, 0x2, 0x2, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) sendto(r0, &(0x7f0000000980)="11311f1dfe0b54f7c0ecc64970d8d09ee7f11810900d245ada0e6402bd576b43c227eca2d9e478c3f5317e68594762d30ccd067bf7d8395853769f86f8877aa4677ad66f17b48a77f57c9508472818cd02faeb88090b3d76da9f4e30800a3f6b5bd4d0cd654c3a45fab761cb6df086c04e7035c627567439af945dabd749b053f3f692c82fba81aed6f82925e633ffed6d706706cc7b9c3ebc337d2175162cddd267515f9ffe044a7be5aa9e42c9f84fb10ebdf4b11bcc5e42bda436ea29", 0xbe, 0x401, &(0x7f0000000a40)=@l2tp6={0xa, 0x0, 0x10001, @empty, 0x5, 0x1}, 0x80) sendto(r2, &(0x7f0000000000)="b268df7ad3372ec9bcd8ef18b5ca5c30e2689c99d86fab5d2fab3e8ff3478ba432251b3c7f334bf3a238fb7d01b9c74b6f626d290d71405bc287cd635e9cc6a426ea5f79da41b985d9903e9dccb970a0cfb67536bb9c9aa21658fe8822174ebbb9ee891ddb69355d4fad891072541bb26f355c5571a59e852d784f679e662bc011d7", 0x82, 0x40800, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x2, @local, 'ip6gre0\x00'}}, 0x80) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket(0x27, 0x2, 0x5) recvmmsg(r4, &(0x7f0000000700)=[{{&(0x7f0000000480)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/170, 0xaa}, {&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x3}, 0x914}], 0x1, 0x40000080, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x30, r3, 0x1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890c, &(0x7f0000000bc0)={0x0, @l2tp={0x2, 0x0, @multicast1, 0x2}, @l2tp={0x2, 0x0, @multicast2}, @can={0x1d, 0x0}, 0xffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)='wg0\x00', 0x1, 0x7, 0x1ff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c80)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r3, @ANYBLOB="04002cbd7000fddbdf25170000008c000180140002006261746164765f736c6176655f3000001400020069703667726530000000000000000000080003000500000014000200766574683000000000000000000000001400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000014000200766c616e3000000000000000000000004c0001800800030001000000140002006d6163767461703000000000000000000800030001000000080003000200000014000200697036746e6c30000000000000000000080003000100000044000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800030000000000380001800800030000000000140002007767320000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000014000180080003000200000008000300010000000c00018008000300030000002400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="561714223d9a19847d637d38f8fbfaac60ffddad7f03c0f47c4eda6872ebc803a7fdedb8375cff39ec2d69ba3cd8c03ec3415af7070202c1d84ca4ede4b1fcb5"], 0x1ac}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000041) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000640)=@ll={0x11, 0x17, r6, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x80, 0x0}}], 0x1, 0xf78a8edc5ea57529) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', r6, 0x29, 0x4, 0x5, 0x400, 0x98, @rand_addr=' \x01\x00', @mcast1, 0x7, 0x700, 0x400, 0x95}}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x584f}, 0x0, 0x0, 0xffffffffffffffff, 0x8) truncate(0x0, 0x0) [ 1757.742508][T21197] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1757.750863][T21197] ref_ctr increment failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000cb0b6db6 00:04:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000a00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=']) 00:04:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x0, 0x6}) [ 1757.803053][T21244] loop1: detected capacity change from 0 to 1024 [ 1757.819630][T21244] EXT4-fs warning (device loop1): read_mmp_block:107: Error -117 while reading MMP block 0 [ 1757.833094][T21251] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1757.886728][T21243] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1757.895218][T21243] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000b00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=']) 00:04:41 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r1, 0x11, &(0x7f0000000040)={0x0, 0x2, 0xb5}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) [ 1757.929367][T21243] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1757.937829][T21243] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1757.937846][T21268] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1758.001169][T21264] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1758.006384][T21283] validate_nla: 23 callbacks suppressed [ 1758.006394][T21283] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1758.009601][T21264] ref_ctr increment failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000cb0b6db6 [ 1758.030425][T21285] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 00:04:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a338, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:04:42 executing program 0: socket(0x15, 0x5, 0xfff) 00:04:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x1508}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000002c0)=""/253, 0xfd}, {&(0x7f00000003c0)=""/144, 0x90}], 0x6, 0x2, 0x1f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r2, &(0x7f0000000580)=0x200, 0x3) truncate(0x0, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendfile(0xffffffffffffffff, r3, &(0x7f0000000500)=0xffffffffffff8000, 0x89) 00:04:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000c00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0']) 00:04:42 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r1, 0x11, &(0x7f0000000040)={0x0, 0x2, 0xb5}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 00:04:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf2512"], 0x30}}, 0x0) [ 1758.774365][T21306] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1758.780428][T21311] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000d00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0']) [ 1758.818649][T21312] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1758.843236][T21324] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:42 executing program 0: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/163, 0xa3}], 0x1, &(0x7f0000001d40)=[{&(0x7f0000001840)=""/114, 0x72}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 1758.863350][T21321] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 00:04:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000e00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x60}}, 0x0) [ 1758.900043][T21301] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1758.908510][T21301] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1758.914525][T21330] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1758.920879][T21332] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 00:04:42 executing program 2: syz_genetlink_get_family_id$nl80211(0xffffffffffffffff, 0xffffffffffffffff) [ 1758.963560][T21301] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1758.972034][T21301] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:42 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000003540), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='sb=0']) [ 1759.006143][T21312] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1759.023294][T21301] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1759.031759][T21301] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:42 executing program 4: sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000104010200000000000000000300bbe93c59000a0800034000000006080004400000013608f16e214725c83c2344f728905b4e0540000009a90000"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20008000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4101, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 00:04:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000280)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="00000000000900000c000000dff4ef821ec34de5a68f275e28ea4831010040", 0x1f, 0x4e0}], 0x0, &(0x7f00000001c0)) 00:04:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009001000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:42 executing program 1: set_mempolicy(0x3, &(0x7f0000000000)=0x71e, 0x5) [ 1759.048620][T21343] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1759.066945][T21301] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1759.075393][T21301] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1759.084117][T21350] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 00:04:42 executing program 5: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0x6) write$9p(r0, &(0x7f0000001400)="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", 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340), &(0x7f0000000400), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x10000) 00:04:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x400000000001002a) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) 00:04:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009001100741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:42 executing program 0: socket(0x22, 0x0, 0x7) [ 1759.165994][T21366] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1759.181056][T21365] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1759.189444][T21365] ref_ctr increment failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000cb0b6db6 [ 1759.201473][T21371] loop5: detected capacity change from 0 to 512 00:04:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x10) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) [ 1759.240010][T21371] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 00:04:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25120000000c009900060000226000000006001201"], 0x30}}, 0x0) 00:04:43 executing program 5: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f00000001c0)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0x6) write$9p(r0, &(0x7f0000001400)="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", 0x10) lsetxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340), &(0x7f0000000400), 0x2, 0x0) sendfile(r0, r1, 0x0, 0x10000) 00:04:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009001200741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1759.326811][T21393] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x28}}, 0x0) 00:04:43 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f00000002c0)=""/6, 0x6, 0x43, &(0x7f0000000340)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendto$unix(r0, &(0x7f00000001c0)="8aa066318dc78ecd1a4f9e094717f9a71d78f04e8d837022767b73ade0b21e4766e7509bbe0a", 0x26, 0x1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0xf8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10a08, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 00:04:43 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46000000000400004002c4a40003003ebe"], 0x3c) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1100) 00:04:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009002500741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1759.641655][T21426] loop2: detected capacity change from 0 to 87 [ 1759.645950][T21427] loop5: detected capacity change from 0 to 512 [ 1759.681522][T21427] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1759.690693][T21435] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1759.730744][T21426] attempt to access beyond end of device [ 1759.730744][T21426] loop2: rw=0, want=90, limit=87 00:04:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009004800741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000200)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x400000000001002a) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) 00:04:44 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f000042c000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) 00:04:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x30}}, 0x0) 00:04:44 executing program 2: prlimit64(0x0, 0x4, &(0x7f0000000000)={0x0, 0x3}, 0x0) 00:04:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x8e, 0x100) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x91b, 0x1, &(0x7f0000000100)=[{&(0x7f0000000200)="eaf1455dbac1d4079ea30f20b3268c00fed6486185b760e4e549ca3a7b6cf7cafed8b140de3f6581c0f50b97917c3b6f42ca0cbcdaf2e1f7c8c4229ed5cdc530e73b7592a9b30775ab963ab29752c1e1dc0b5d0a1a20c70fd65350103a2f4ef277578444968d66f1a68887cac869a32d036984b6765d678523f2f58774b20b3304e649ef28750cffe9701fc16eec165ea6bbb746dd9e99fdf5891654da95554736f68226ba4e17647963e573b49a03a20692a52de5157af05e1c53835e0256f587b8536d1f44157e7fa6aca6d8b893157eadb4135cb72cef4193487985aaf9fca6714f9702549f9b", 0xe8, 0x5}], 0x200000, &(0x7f0000000300)={[{@data_journal}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@noquota}], [{@smackfsdef={'smackfsdef', 0x3d, '(\x9e(@\''}}, {@subj_role={'subj_role', 0x3d, 'M'}}, {@context={'context', 0x3d, 'root'}}]}) 00:04:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) rename(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') [ 1760.397540][T21476] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:44 executing program 2: process_vm_writev(0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) [ 1760.509639][T21481] loop4: detected capacity change from 0 to 4 00:04:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009004c00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:44 executing program 0: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f000042c000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) [ 1760.598193][T21481] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 00:04:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0x29, 0x2a, [@prep={0x83, 0x1f, @not_ext}, @ibss={0x6, 0x2}]}]}, 0x54}}, 0x0) 00:04:44 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f00000002c0)=""/6, 0x6, 0x43, &(0x7f0000000340)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) mkdir(&(0x7f0000000080)='./bus\x00', 0x102) mkdir(&(0x7f0000000280)='./file1\x00', 0xf) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0xf8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10a08, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 00:04:44 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) [ 1760.730337][T21467] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1760.738826][T21467] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1760.767774][T21506] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1760.814416][T21514] loop2: detected capacity change from 0 to 87 [ 1760.846374][T21467] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1760.854919][T21467] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1760.875746][T21522] loop4: detected capacity change from 0 to 4 [ 1760.882207][T21522] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 1760.930907][T21467] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1760.939345][T21467] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1760.955874][T21467] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1760.964281][T21467] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:44 executing program 1: recvfrom(0xffffffffffffffff, &(0x7f00000002c0)=""/6, 0x6, 0x43, &(0x7f0000000340)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendto$unix(r0, &(0x7f00000001c0)="8aa066318dc78ecd1a4f9e094717f9a71d78f04e8d837022767b73ade0b21e4766e7509bbe0a", 0x26, 0x0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdir(&(0x7f0000000080)='./bus\x00', 0x102) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0xf8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10a08, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 00:04:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009006000741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf25120000000c00990006000022600000000600120102"], 0x30}}, 0x0) 00:04:44 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) 00:04:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000040), 0x1, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) 00:04:44 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = gettid() tkill(r1, 0x34) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f80)={0x1, &(0x7f0000000f40)=[{0x7f}]}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000002d40)=ANY=[@ANYBLOB="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", @ANYRES64=r8, @ANYRESHEX, @ANYRES32=r7, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r6], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000002940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000540)={0x8, 0x0, {0x5, @usage=0x8, 0x0, 0x5, 0x55e, 0x8, 0x3, 0x9, 0x20, @usage, 0xffffff00, 0x7, [0x100000001, 0x20000000, 0x7, 0x1, 0xfffffffffffffffe, 0xa4d]}, {0x2, @usage=0xfffffffffffffffe, 0x0, 0xfffffffffffffbff, 0x3, 0x100000000, 0x8, 0x0, 0x448, @struct={0x3b64, 0x3}, 0x800, 0x7fff, [0xb, 0x4, 0x0, 0x2, 0x0, 0xd71]}, {0x9, @usage=0xe1, r11, 0xe1, 0x4, 0x5, 0x1, 0x3, 0x487, @usage=0x7, 0x2, 0x3, [0xfff, 0xb74, 0x0, 0x101, 0xe2b, 0x8]}, {0x78d, 0x40, 0x3}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000340)={{r4}, r8, 0x6, @inherit={0x88, &(0x7f0000000100)={0x4645e2ae752c5674, 0x8, 0x7, 0x1, {0x9, 0x20, 0x0, 0x7, 0x2}, [0x3, 0x4, 0x15, 0x6, 0x0, 0x1, 0x0, 0x1]}}, @devid=r11}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000200)={r11, "ff1fd364132ae3dde94e88e8478d1721"}) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe73, 0x9c3}, 0x0, 0x0, 0x0, 0x9}, r1, 0x9, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:45 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) 00:04:45 executing program 5: recvfrom(0xffffffffffffffff, &(0x7f00000002c0)=""/6, 0x6, 0x43, &(0x7f0000000340)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendto$unix(r0, &(0x7f00000001c0)="8aa066318dc78ecd1a4f9e094717f9a71d78f04e8d837022767b73ade0b21e4766e7509bbe0a", 0x26, 0x1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdir(&(0x7f0000000080)='./bus\x00', 0x102) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0xf8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10a08, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 00:04:45 executing program 4: modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x20001000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) [ 1761.245872][T21540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1761.256385][T21542] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1761.284809][T21543] loop1: detected capacity change from 0 to 87 00:04:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009006800741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1761.299247][T21549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 00:04:45 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:04:45 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x4}) [ 1761.339567][T21557] loop5: detected capacity change from 0 to 87 [ 1761.344068][T21546] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1761.354148][T21546] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1761.358758][T21543] attempt to access beyond end of device [ 1761.358758][T21543] loop1: rw=0, want=90, limit=87 [ 1761.404971][T21557] attempt to access beyond end of device [ 1761.404971][T21557] loop5: rw=0, want=90, limit=87 [ 1761.420079][T21565] attempt to access beyond end of device [ 1761.420079][T21565] loop5: rw=2049, want=98, limit=87 [ 1761.426710][T21546] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1761.431884][T21566] attempt to access beyond end of device [ 1761.431884][T21566] loop1: rw=2049, want=98, limit=87 00:04:45 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) 00:04:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009006c00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:45 executing program 5: r0 = getpgrp(0x0) prlimit64(r0, 0x0, &(0x7f0000000000), 0x0) 00:04:45 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}) 00:04:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x301, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0) [ 1761.439184][T21546] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1761.450458][T21565] attempt to access beyond end of device [ 1761.450458][T21565] loop5: rw=0, want=98, limit=87 [ 1761.474184][T21566] attempt to access beyond end of device [ 1761.474184][T21566] loop1: rw=0, want=98, limit=87 00:04:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c2", 0x61, 0x400}], 0x0, &(0x7f00000001c0)={[{@lazytime}]}) 00:04:45 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}) 00:04:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendto$unix(r0, &(0x7f00000001c0)="8aa066318dc78ecd1a4f9e094717f9a71d78f04e8d837022767b73ade0b21e4766e7509b", 0x24, 0x1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0xf) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0xf8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10a08, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) [ 1761.549081][T21546] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1761.557633][T21546] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:45 executing program 4: openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x81, 0x0, 0x0, 0x2000000000, 0x0, 0x7b}, 0x0, 0x0, 0xffffffffffffffff, 0x9) truncate(0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x2d, 0x2, 0x74, 0x0, 0x81, 0x7612, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x4, 0x3, 0x200, 0x1, 0x6, 0x7fff, 0x5, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xd, r0, 0x2) 00:04:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009007400741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]]}, 0x1c}}, 0x0) [ 1761.624113][T21546] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1761.632576][T21546] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1761.637761][T21597] loop5: detected capacity change from 0 to 4 00:04:45 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x4}) [ 1761.684728][T21602] loop2: detected capacity change from 0 to 87 [ 1761.712196][T21597] EXT4-fs (loop5): unsupported descriptor size 0 00:04:45 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x7, 0x0) 00:04:45 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000200)={0x0, 0x8d}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 00:04:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009007a00741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1761.746114][T21602] attempt to access beyond end of device [ 1761.746114][T21602] loop2: rw=0, want=90, limit=87 00:04:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) truncate(0x0, 0x0) [ 1761.786623][T21597] loop5: detected capacity change from 0 to 4 [ 1761.795128][T21597] EXT4-fs (loop5): unsupported descriptor size 0 [ 1761.824976][T21602] attempt to access beyond end of device [ 1761.824976][T21602] loop2: rw=2049, want=98, limit=87 00:04:45 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x7, 0x0) [ 1761.842851][T21631] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x18}}, 0x0) 00:04:45 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400007, 0x15) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 00:04:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000003741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendto$unix(r0, &(0x7f00000001c0)="8aa066318dc78ecd1a4f9e094717f9a71d78f04e8d837022767b73ade0b21e4766e7509b", 0x24, 0x1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0xf) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0xf8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10a08, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 00:04:45 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x7, 0x0) [ 1761.892103][T21623] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1761.900566][T21623] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000001c0)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}, ["", "", "", "", "", ""]}, 0xfffffff2}}, 0x0) 00:04:45 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x7, &(0x7f0000000000)) 00:04:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000005741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1761.959692][T21623] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1761.968161][T21623] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:04:45 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x7, &(0x7f0000000000)) [ 1762.032672][T21665] loop2: detected capacity change from 0 to 87 [ 1762.048066][T21623] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1762.056512][T21623] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() tkill(r0, 0x34) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x4, 0x5, 0x5c, 0x40, 0x0, 0x9, 0x40020, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x20, 0x7, 0x3, 0x1, 0x2c, 0x5, 0x50, 0x0, 0x5, 0x0, 0x5}, r0, 0x1, 0xffffffffffffffff, 0x1) truncate(0x0, 0x0) 00:04:45 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000006741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:45 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400007, 0x15) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 00:04:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80000, 0x4, &(0x7f0000000300)=[{&(0x7f0000000280)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000018000000c28500002b02", 0x66, 0x400}, {&(0x7f0000010100)="00000000000900000c000000dff4ef821ec34de5a68f275e28ea4831010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000050040", 0x29, 0x540}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f00000001c0)={[{@lazytime}]}) [ 1762.112121][T21631] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1762.130109][T21665] attempt to access beyond end of device [ 1762.130109][T21665] loop2: rw=0, want=90, limit=87 [ 1762.133207][T21623] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1762.149209][T21623] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:45 executing program 0: rt_sigqueueinfo(0xffffffffffffffff, 0x7, &(0x7f0000000000)) 00:04:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 00:04:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000007741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1762.211763][T21690] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1762.220122][T21690] ref_ctr increment failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000cb0b6db6 [ 1762.245964][T21693] loop2: detected capacity change from 0 to 1024 00:04:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x1c}}, 0x0) [ 1762.274914][T21693] EXT4-fs error (device loop2): ext4_fill_super:4956: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1762.286997][T21693] EXT4-fs (loop2): get root inode failed [ 1762.292623][T21693] EXT4-fs (loop2): mount failed 00:04:46 executing program 0: recvfrom(0xffffffffffffffff, &(0x7f00000002c0)=""/6, 0x6, 0x43, &(0x7f0000000340)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) sendto$unix(r0, &(0x7f00000001c0), 0x0, 0x1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0xf8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10a08, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 00:04:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000009741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1762.353876][T21693] loop2: detected capacity change from 0 to 1024 [ 1762.389690][T21693] EXT4-fs error (device loop2): ext4_fill_super:4956: inode #2: comm syz-executor.2: iget: root inode unallocated [ 1762.401725][T21693] EXT4-fs (loop2): get root inode failed [ 1762.407411][T21693] EXT4-fs (loop2): mount failed 00:04:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x134) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f660500000020255c232624267a24a31f6d01c55e212e275b257d20243a2a2b2c262c2120402b5c2f2d3a282a5b7b20209c20275b26257b2e40207dc40000200aadb70f69849242d7d7e1d2dfec192d5805e859b1caf9d25f91084ee3f68c490408a90d3cd0655de2ac3e09d1ab503687d57f68ff99ae8f35a9920b882eaf3f1c1902c5da076133ad44174f85fffcda5e1e8dfeda1e1c"], 0x96) openat(r0, &(0x7f0000000100)='./file0\x00', 0x8282, 0x22) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x1) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$notify(r1, 0x402, 0x100000002) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:46 executing program 1: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 00:04:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x10, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) mkdir(&(0x7f0000000080)='./bus\x00', 0x102) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0xf8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 00:04:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900000a741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:46 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f000065e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000562000/0x2000)=nil) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0xff, 0x8001, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x993, 0x3}, 0x5291, 0x8000, 0x10002, 0x0, 0x0, 0x0, 0x6b13}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1762.985855][T21735] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: 1 [ 1762.994229][T21735] ref_ctr increment failed for inode: 0x361c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0x00000000cb0b6db6 [ 1763.053628][T21744] validate_nla: 9 callbacks suppressed [ 1763.053642][T21744] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1763.069163][T21745] loop5: detected capacity change from 0 to 87 00:04:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900000b741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:46 executing program 4: munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc, 0x1010, r0, 0x1588e000) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0xff, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:46 executing program 5: r0 = syz_io_uring_setup(0x1a5, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f000042c000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x5}, 0x36) socket(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) io_uring_enter(r0, 0x2a71, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) 00:04:46 executing program 2: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/163, 0xa3}], 0x1, &(0x7f0000001d40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 00:04:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900000c741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1763.175764][T21761] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1763.197342][T21760] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.205818][T21760] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1763.239855][T21760] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.248332][T21760] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:47 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000100), 0x0) 00:04:47 executing program 1: mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1) 00:04:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000040)=0x1e) [ 1763.284059][T21760] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.292528][T21760] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1763.314044][T21760] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.322489][T21760] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = geteuid() r1 = syz_mount_image$vfat(&(0x7f0000002300), &(0x7f0000000080)='./file0\x00', 0xf42d0a2, 0x3, &(0x7f0000002200)=[{&(0x7f00000000c0)="28b41dc2eaa110dc42b3792fede1a6e8bb1fc6b3c3b57a3a6527659400987ca647d6040770f53a106e964de493038ff8fb958517ab7cca0fa6ff740bc5a0413a94087309329f1665d9c934f505299f3dd4147b035e13fe1046573d31d29854ff405170de70792b94e44343b38b420096a53ce86255dfd0b80eb262bc884f134d78a62a992611696d2f0335768f781207d2828ae5288b48b427d2882d61d65801a14022d0bbb86a7138a02354", 0xac}, {&(0x7f0000000200)="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", 0x1000, 0x83b}, {&(0x7f0000001200)="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", 0x1000, 0x9}], 0x110811, &(0x7f0000002280)={[{@shortname_winnt}, {@utf8}], [{@uid_gt={'uid>', r0}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) truncate(0x0, 0x0) preadv(r1, &(0x7f0000004780)=[{&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/131, 0x83}, {&(0x7f0000003400)=""/235, 0xeb}, {&(0x7f0000003500)=""/104, 0x68}, {&(0x7f0000003580)=""/38, 0x26}, {&(0x7f00000035c0)=""/58, 0x3a}, {&(0x7f0000003600)=""/214, 0xd6}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/85, 0x55}], 0xa, 0x40, 0x1) 00:04:47 executing program 1: socket(0x0, 0x3ffd, 0x0) [ 1763.325521][T21784] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:47 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) r1 = dup2(r0, r0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 00:04:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100), 0x0) 00:04:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900000d741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1763.431578][T21799] loop4: detected capacity change from 0 to 264192 00:04:47 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) shutdown(r0, 0x0) 00:04:47 executing program 2: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) 00:04:47 executing program 0: r0 = semget(0x0, 0x0, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)) 00:04:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900000e741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1763.534487][T21794] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.542940][T21794] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1763.555511][T21820] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:47 executing program 5: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x7}], 0x1) 00:04:47 executing program 2: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) [ 1763.602734][T21794] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.611241][T21794] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1763.638437][T21832] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1763.670290][T21799] loop4: detected capacity change from 0 to 264192 [ 1763.687134][T21794] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.695623][T21794] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x10001, 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x88, 0x1, 0xb8, 0x5, 0x0, 0x4, 0x280, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0xa}, 0x10, 0x6, 0x7fffffff, 0x0, 0x3f, 0x9a6, 0x5, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x10, r1, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x400040, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x81, 0x8c, 0x9d, 0x1f, 0x0, 0x400, 0x104, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x140000000}, 0x0, 0x100000000, 0x9, 0x4, 0xfff, 0x2, 0xfff7, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x10, r2, 0xa) truncate(0x0, 0x0) 00:04:47 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000011741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000240)='\f', 0x1}], 0x3}, 0x0) 00:04:47 executing program 5: poll(&(0x7f0000000140)=[{}, {0xffffffffffffff9c}], 0x2, 0x2) [ 1763.733356][T21794] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.741814][T21794] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1763.803549][T21850] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.806163][T21855] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1763.812041][T21850] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1763.844618][T21850] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.853202][T21850] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1763.882118][T21850] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.890577][T21850] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1763.910248][T21850] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1763.918757][T21850] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:48 executing program 1: semget(0x0, 0x0, 0x509) 00:04:48 executing program 2: mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:04:48 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 00:04:48 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) fchdir(r0) 00:04:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000012741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x59}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "58361dca03542c317df8278ee0"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ce579f29bf"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f4d0d7d8ceab81efaef5ebb9b7"}]}, 0x74}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) [ 1764.358803][T21875] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1764.398767][T21870] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:48 executing program 1: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 00:04:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000020741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 00:04:48 executing program 5: readv(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}], 0x1) 00:04:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)="13ed1e50f0d9a18ba4a76341b5a2ff89", 0x10}, {&(0x7f0000000100)="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", 0x7f1}], 0x2}, 0x0) [ 1764.407219][T21870] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1764.448948][T21870] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:48 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ftruncate(r0, 0x0) 00:04:48 executing program 5: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000000), 0x4) 00:04:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000025741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1764.457489][T21870] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1764.472307][T21889] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname(r0, 0x0, 0x0) 00:04:48 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) fcntl$lock(r0, 0x8, 0x0) 00:04:48 executing program 1: r0 = semget(0x0, 0x3, 0x323) semget(0x0, 0x0, 0xe) semctl$IPC_RMID(r0, 0x0, 0x0) 00:04:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x80010, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x533, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001f7000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000680)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r0, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="80", 0x1}, {&(0x7f0000000200)="8064a174d02ea958088cb87c07a78162091bf7bbfeb097cdd96cc56a843b1884b191e64e7f373173b6608252a8480d678fabf8881aeda4f1dd9b77bac294b762c5dd70f8a12321ea6146c43e8145d172f2f962a04ddba2ebb4b6650ebac5c3367819e36a201a7959ec25e5213c1722d17dd4f7886d8aa14ea655a5a075b9b30dba5729e37bfa6117c8e1108e5a34616901331085d9d04e2f3391f8340f77f88cae01b6796467855b1dea5815371643af42ef985eb7b74dc489575712082c291b6218595c2ef0f9beeb4d5a8e1476abccd0f1b56cdea349a59c6bf13bfb61efd79946e3744fea4a73e273c64c", 0xec}, {&(0x7f00000000c0)="5468ff60b71d6bfb5d3119e1c97ca069e8e702ec16f69c5ef3504ebf7160914e89e78c532e29dc7d06533b3be09b125bf35fa1bf0cf73ecbf1006f7a97c7ecac1488d6103b1388c5633435253729e7b29218cab8b2af0815129e071ff22e879d59cfaa2279fccc6a5a717e18b9865969c3de020e453378d9ac5d6c140c997eb4db2b0ccd0627df44be05709b17ece6e07a089a9efadc99bc1f47cde3853879e43f045d66e53d26aca13c438dc736b7efb242", 0xb2}, {&(0x7f0000000300)="3191babf1d04abd218e19fc7d23f3d20f1893bb20b36068c955b855b15866e0d6c4dad57e157aff63cc8260e8cf8a3463722c0d196baf9dc7ec36c968587425770c7", 0x42}, {&(0x7f0000000380)="968a7b1a801ccbb31c7c7a6b758cefbe0938612e88a9e6f739a595aaa39b5e7b49f242110bc09aa41b", 0x29}, {&(0x7f00000003c0)="5a674c34544c488f6fe9102922b81e48bf128daf6539b0c4f343fc7f731464d62b9cc2bc4a7e25400a873d0e07e0c3ea39c156262054151b4f3c2366906e3d79c006abb744089f03b2741ebd701ff3a8a52572e62afb206008bc72ded5be0df5cb45b31823d79848b202666c125b4c3e5852fb1e88c2445ff94d70250023b8e8818a99babe87a61af0dbaa1c755607095f100ee801810e0d082ae2aba55f9f1ed37d6e7583136698db1818e0b6a95d3a6be328d7f05843a3b72d022f0c0edb980e9b53ac86f824afefd6e165b6db1e41993988b2a6485310df2c6dca950d1c", 0xdf}], 0x6, &(0x7f0000000540)=[{0xe0, 0x114, 0x5, "6a96e1e1f1d1aada171e6f777138ebd68f985d4cf76724b5d25cfb6e3a2722b2fe775d02d818529a8ee360be3a3cb902df8f96c29264aef9a1a13412b4cbdc4262e8644e209f7f368297bd91f25eef3c6fbffd2fe697f37007e9d0b58438242652a665dad7b356fa76b56831523c5caa109f49cf25ab79ae220a9632bcfb1b149ee2b54bc0bd452292ba9e85f4c68a3d7d4d6ed503bc873044bfeb2b118c663adeb3d2c1fd9329a0d9b0b62eb749ab553fee53d473b9828c01ba086876cb09e5baea9217f77fdada898face5"}], 0xe0}, 0x0, 0x4000010, 0x1, {0x0, r5}}, 0x7f) unlink(&(0x7f0000000040)='./file0\x00') 00:04:48 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1, 0xb4}, {r0}, {r2, 0x4}, {r3}], 0x4, 0x0) 00:04:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000180), 0x4) [ 1764.567690][T21911] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:48 executing program 0: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f00000000c0)=[{0x3}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9) 00:04:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009007235741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:48 executing program 1: poll(0x0, 0x0, 0xfffffffc) 00:04:48 executing program 2: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x800, 0x1000}], 0x1) 00:04:48 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000300000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)={[{@data_err_abort}]}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="f6deb42b9e2be619e169a7a7bea8039332bc", 0x12}], 0x1, 0x6) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:48 executing program 0: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 00:04:48 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) [ 1764.699125][T21934] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:48 executing program 0: r0 = socket$inet6(0x18, 0x2, 0x0) shutdown(r0, 0x0) 00:04:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000048741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:48 executing program 2: r0 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x18, 0x3}, 0xc, 0x0, 0x0, &(0x7f0000000580)=[{0x10}, {0x10}], 0x20}, 0x0) 00:04:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x3, 0x0, 0x0) [ 1764.770593][T21946] loop4: detected capacity change from 0 to 4 [ 1764.803976][T21946] EXT4-fs (loop4): bad block size 8192 00:04:48 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900004c741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:48 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20bc0, 0x0) 00:04:48 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getrlimit(0x0, &(0x7f00000000c0)) [ 1764.836294][T21946] loop4: detected capacity change from 0 to 4 00:04:49 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, &(0x7f0000000040)) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 00:04:49 executing program 2: faccessat(0xffffffffffffffff, 0x0, 0x100) 00:04:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000060741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:49 executing program 5: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x800}, {0x0, 0x0, 0x1800}], 0x2) 00:04:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x2, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc06}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) truncate(0x0, 0x0) 00:04:49 executing program 0: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5) 00:04:49 executing program 5: r0 = socket$inet6(0x18, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x403, &(0x7f0000000000)=@in6={0x18, 0x3}, 0xc) 00:04:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000068741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:49 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(0x0) 00:04:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x3}, 0x8) 00:04:49 executing program 2: r0 = semget(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000040)=""/45) 00:04:49 executing program 5: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) 00:04:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900006c741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:49 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) dup2(r0, r0) 00:04:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x3}, 0x8) 00:04:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='freezer.self_freezing\x00', 0x0, 0x0) r2 = accept$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = accept4$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80800) sendmsg(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) ioctl$FIOCLEX(r5, 0x5451) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:49 executing program 2: setpgid(0x0, 0x0) setpgid(0x0, 0x0) 00:04:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa, 0x0}, 0x0) 00:04:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009003572741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1765.852393][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:49 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 00:04:49 executing program 0: mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 00:04:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), 0x8) [ 1765.901766][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:49 executing program 5: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 00:04:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000074741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:49 executing program 1: semget(0x0, 0x3, 0x323) [ 1765.949871][T22045] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1765.979469][T22064] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:49 executing program 2: r0 = socket$inet6(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000000), 0x4) 00:04:49 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) preadv(r3, &(0x7f0000000780)=[{&(0x7f0000000040)=""/16, 0x10}, {&(0x7f0000000440)=""/26, 0x1a}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f0000000680)=""/211, 0xd3}], 0x6, 0x3ff, 0x3) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000000340)=""/149, 0x95}], 0x2, 0xffffffff, 0x7) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x9) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffff0001}}, {{0xa, 0x4e23, 0x1, @mcast2, 0x1}}}, 0x108) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:49 executing program 0: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x800}], 0x1) 00:04:49 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x0) 00:04:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900007a741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000000c0)=[{r0, 0x40}, {r0, 0x1}, {r1, 0x4}], 0x3, 0x0) [ 1766.076476][T22085] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1766.115763][T22081] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:49 executing program 0: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 00:04:49 executing program 2: munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0) [ 1766.124216][T22081] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1766.161545][T22081] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 00:04:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001900090000000a1d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="c735120839e7d7909afec2a53249a05358e903e55390c9a5a9e1b9aa58182cbad26632448e905d60efe855193ee443c81e3451b949ca9d5364602e73d78890680b832070d9027574ebb98ca647f2bc79c9994a13ff0752735b0fc067ef9812711493fa9e2d99414cd16b0a456cbe1d93fbcbbaa418b7985d1fdd1e373f4f3d8b8d21d0f1ace64a81f27b94c1ea283613fb", 0x91}], 0x1}, 0x0) [ 1766.169995][T22081] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:50 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x0, 0x0, 0x0) 00:04:50 executing program 2: r0 = socket$inet6(0x18, 0x2, 0x0) r1 = dup(r0) getsockopt$sock_timeval(r1, 0xffff, 0x1006, 0x0, 0x0) [ 1766.232752][T22109] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000017c0), &(0x7f0000000080)='./file0\x00', 0x7, 0xa, &(0x7f0000001640)=[{&(0x7f00000000c0)="1a49cdd522ffdb968756a221a15b833ecb3e6a274cc4288e57cbeb45db10ddcc0d047ebe6ca17810ac7a379df0be28c891f6ba79dcf45362b27225fd530d2c179471f2a0bf05534ae22f2dadf50a4812c46ed0db275873987d3b97d957bec09e10145a00b793b6d0a53a2bd7d346a109da39b0e813db1206c72a1633e33e7afa02c368ee77dd19f5faedaf0ccffd20eebcd4241a18d81f9cc86107cf295e332d5e3c19c9dccd6180231c9becc1af428c6412fd5db10e83269ce7", 0xba, 0x7}, {&(0x7f0000000200)="cc75f87e10b4ee578ca488468301bbd4d04944f20bdccdeefde56b8ed864c2c4f4bf645947a08d0cba16df686aee2ddb874ecc4403f62e64e36fcd99f57dd6636b096d037c2966b993710bc453c08c82e0d7f17aca11ad662b490c117b61ca180efa0f5e819a5826c6b99b6696cdcbd69f1b20cf", 0x74, 0xfffffffffffffffc}, {&(0x7f0000000280)="738532965738774fb5dc8513dd1add955523794f492420bb08a1cdac7c6211ddd15d90d4e6c930c8ee020462a2471a728ae148e84592cf8c124ad7144081784b821626e566fc7e53a18686461aad1e4aaad346a3684c23582d3a969d672fb851b618220915312195053b6f87d1002320442050c7fe249abccadaa85ce9e0757062d0f23ac036d9e32f52b6f3c59167", 0x8f, 0x1}, {&(0x7f0000000340)="e803ceb93bfbe2b8d157f445abc2611a165d8b08aa721d228e23616fc829985c1ed60b7c1bfc543778135cc70163745b6c0cbbd0e131a75de23e6e1782e07e9ffcf6c60c128d10ff330bf2a90b3279526776e765c61ee287151dad307bc0ae4d0a8c25e08a05dd998da76d155eddcd3a80814c875877d1c7e0717dcb8c5b89eab7aef233464fa0be19f26f0f3ec21d1f4620969f29234e9e046d601029cf3f0e15f4f07c5ad04ee7", 0xa8}, {&(0x7f0000000400)="03fe700523f7514bdd7137744aa71ca0dfd972a60439f96c17012b76c168b795080b29ab781dc5ca1524c29ac9dd90daf05879089eb9aa1faa57e1e1e3316421ffdb2d729a80e288c0b4bb126caa2ceba94ab4f53519e10af974a62134d18183ea1fc51cc3b428", 0x67, 0x6}, {&(0x7f0000000480)="80", 0x1, 0x6}, {&(0x7f00000004c0)="0c7aec4cec568fcd05426239ec388ca0389740f82755e82b1361d10d7a8fe16cc9f0efc1949ef78b4f56761e0dabb4639f319845b70cae7edb7bbd457253b554c4034e15ee816ff56f8012a7522cb3ed451cbc02f7959af0e62b997f83777bec3ce79f61d6ef532ff765f6ee34d759eddac0ac836cb3fc921f9a0e9911324305546c5baf80ce2a2937c94e6c978f48a32089ea4eb9f81b2d8f6887d372fcd078a72bcb6ce5bca6e0ff55182e8e4f2c1716134aad564fef10b2dcb5c414ca78259a28dcf2f6202a9ec35a0ab9467c0d00", 0xd0, 0x80}, {&(0x7f00000005c0)="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", 0x1000, 0xcf0}, {&(0x7f00000015c0)="d506a265bb8fe247294049c073ec146772014a7c4c28d48e97897a52a3322f056a9e9e032a87e23997", 0x29}, {&(0x7f0000001600)="be760d482584d78e84", 0x9, 0x1}], 0x80004, &(0x7f0000001740)={[{@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '=static', @val={0x3a, [0x35, 0x39, 0x0, 0x33, 0x30, 0x35, 0x30, 0x31, 0x3a]}}}}], [{@fsmagic={'fsmagic', 0x3d, 0x1010000000}}, {@smackfshat={'smackfshat', 0x3d, '#\\'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) dup(r0) truncate(0x0, 0x0) 00:04:50 executing program 0: munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) 00:04:50 executing program 1: recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0xc) 00:04:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000251d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:50 executing program 5: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x800}, {0x0, 0x3f}, {}], 0x3) 00:04:50 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000000)=0xfffffe59) 00:04:50 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) sendmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 00:04:50 executing program 5: r0 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@in6={0x18, 0x3}, 0xc, 0x0}, 0x0) 00:04:50 executing program 2: r0 = socket$inet6(0x18, 0x2, 0x0) r1 = dup2(r0, r0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) 00:04:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000002741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1766.425271][T22148] loop4: detected capacity change from 0 to 16383 [ 1766.462394][T22130] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:50 executing program 0: mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:04:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000003741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1766.470878][T22130] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1766.524842][T22130] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1766.533315][T22130] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1766.556655][T22148] loop4: detected capacity change from 0 to 16383 [ 1766.581200][T22130] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1766.589663][T22130] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000200)={0x0, 0x20, 0x0, [0x1000, 0x4, 0x3, 0x3, 0x3], [0x6, 0x3, 0x101, 0x9, 0x2, 0x9, 0xf3, 0x8, 0x1, 0x5, 0x3, 0x7, 0x8, 0xf2b, 0x52424ac6, 0x6, 0x8001, 0x1, 0xff, 0x8, 0x9, 0x4, 0x5, 0x3, 0x3ff, 0x6, 0x200, 0xfff, 0x6c1, 0x7fff, 0x63b, 0xd7, 0x7, 0x0, 0x1, 0x2, 0xd2b, 0xe22, 0x100, 0x9, 0x100000000, 0x1, 0x800, 0x100000000, 0x8, 0x7941, 0x1a4, 0x1, 0x4, 0x40, 0x8, 0x5, 0x0, 0x401, 0x401, 0x100, 0x7fffffff, 0x1, 0x5, 0x101, 0x0, 0x1ff, 0x40, 0x6, 0x7f, 0x0, 0x5, 0x7, 0x100, 0x2, 0x3, 0x400, 0x3, 0x1f, 0xd7, 0x4, 0x400, 0x2, 0x2, 0x9, 0x5, 0x195, 0x8, 0x8a8, 0x42ca, 0x2b, 0x2, 0x4, 0x6, 0x0, 0xe9, 0x9, 0xffffffffffff0471, 0x0, 0x0, 0xe74, 0x5f795547, 0x7, 0x800, 0x5, 0x4, 0xc2, 0x7ff, 0x100000000, 0x71e, 0x74c3, 0x3, 0x4, 0xfffffffffffffeff, 0x7, 0x0, 0x6, 0x100000001, 0x3, 0xfff, 0xc04, 0x7, 0xffffffff00000000, 0x8, 0x80, 0x54]}) 00:04:50 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000140)=@in6, 0xc, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/114, 0x6e}, {&(0x7f0000000200)=""/116, 0xfffffffffffffdc0}, {&(0x7f0000000580)=""/60, 0x3c}, {&(0x7f00000002c0)=""/32, 0x20}, {&(0x7f0000000300)=""/219, 0x13c}], 0x5, &(0x7f0000000480)=""/183, 0xb7}, 0x0) 00:04:50 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) 00:04:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000004741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:50 executing program 5: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}}) 00:04:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 1766.629191][T22130] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1766.637660][T22130] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000005741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:50 executing program 1: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 00:04:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 00:04:50 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 1766.740760][T22199] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1766.749224][T22199] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000006741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:50 executing program 0: socket(0x0, 0x0, 0xd3) [ 1766.794433][T22199] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1766.802893][T22199] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000480)='c%\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000440)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000340)=""/231, 0xe7}], 0x2, &(0x7f00000002c0)=""/54, 0x36}, 0x10022) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) poll(&(0x7f0000000080)=[{r1, 0x41a}, {r2, 0x408}, {r4}, {0xffffffffffffffff, 0x4020}, {r1, 0x184}, {r0, 0x330}], 0x6, 0x8) 00:04:50 executing program 5: munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 00:04:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 00:04:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000007741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r0, 0x0) 00:04:50 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) r1 = dup(r0) sendmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred], 0x20}, 0x0) [ 1766.888602][T22199] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1766.897079][T22199] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1766.912518][T22199] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1766.920966][T22199] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:50 executing program 1: setrlimit(0x0, &(0x7f00000002c0)={0xec18}) 00:04:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000008741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:50 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) accept$unix(r0, 0x0, 0x0) 00:04:50 executing program 5: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000), 0x10) [ 1767.035260][T22260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:50 executing program 0: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 00:04:50 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000009741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1767.078600][T22260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1767.111165][T22251] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.119636][T22251] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1767.171870][T22251] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.180334][T22251] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1767.192822][T22293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1767.203151][T22260] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:04:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x34c381, 0x19) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) 00:04:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000b80), &(0x7f0000000bc0)=0xc) 00:04:51 executing program 5: r0 = socket$inet6(0x18, 0x2, 0x0) fcntl$getown(r0, 0x5) 00:04:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900000a741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:51 executing program 0: mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) [ 1767.216850][T22251] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.225279][T22251] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1767.241088][T22251] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.249522][T22251] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900000b741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:51 executing program 2: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x1, 0x800, 0x1000}, {0x0, 0x3f, 0x1800}, {0x0, 0xf32}], 0x3) 00:04:51 executing program 0: r0 = eventfd2(0x20, 0x800) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffff8, 0x8) 00:04:51 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) 00:04:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900000c741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1851c0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x96) [ 1767.379896][T22299] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.388372][T22299] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1767.442122][T22299] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.450594][T22299] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x3, 0x0, [], 0x0, 0x0, 0x0}, 0xf0a) 00:04:51 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140), &(0x7f00000001c0)=0x8) 00:04:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900000d741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:51 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xcc) 00:04:51 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x14d440, 0x0) 00:04:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2c3c6c68ecdbb647, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1f}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000140) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x10) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900000e741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) 00:04:51 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000001c0)=0x80) ioctl$sock_inet_SIOCDELRT(r1, 0x5451, 0x0) 00:04:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000100)=0x80) dup3(r0, r1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 1767.580001][T22343] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.588486][T22343] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:51 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x59) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept(r0, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x0, 0x0, 0x0) [ 1767.635742][T22343] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.644191][T22343] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:51 executing program 0: symlinkat(&(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') setxattr$incfs_metadata(&(0x7f0000000600)='./file0/file1\x00', &(0x7f0000000640), 0x0, 0x0, 0x0) 00:04:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000010741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:51 executing program 2: r0 = epoll_create1(0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), 0x0, 0x0, 0x0) 00:04:51 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0xb, 0x0, &(0x7f0000000240)) 00:04:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000100)=0x80) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x5452, 0x400000) 00:04:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1740}, {r0, 0x5006}, {0xffffffffffffffff, 0x181}], 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) [ 1767.733108][T22351] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.741603][T22351] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000011741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) ioctl$KDGKBMODE(r1, 0x5451, 0x0) 00:04:51 executing program 5: r0 = memfd_create(&(0x7f0000000080)='%*$\x00', 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) 00:04:51 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r0, 0x0) [ 1767.864535][T22387] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.873009][T22387] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1767.890993][T22387] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.899443][T22387] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000080)=0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x5450, 0x0) 00:04:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000012741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:51 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000005780), 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0x5451, 0x0) 00:04:51 executing program 5: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000000)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @local}}}, 0x108) [ 1767.940879][T22387] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.949343][T22387] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000025741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:51 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x5451, 0x0) [ 1767.985594][T22387] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1767.994046][T22387] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:51 executing program 4: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) truncate(0x0, 0x0) 00:04:51 executing program 0: pipe(&(0x7f0000002e00)={0xffffffffffffffff, 0xffffffffffffffff}) write$tcp_congestion(r0, 0x0, 0x0) 00:04:51 executing program 1: setuid(0xee01) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 1768.075254][T22439] validate_nla: 27 callbacks suppressed [ 1768.075265][T22439] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1768.107674][T22438] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1768.116199][T22438] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1768.152100][T22438] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1768.160553][T22438] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1768.201351][T22438] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1768.209825][T22438] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1768.225355][T22438] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1768.233754][T22438] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$BTRFS_IOC_SYNC(r1, 0x5450, 0x748000) 00:04:52 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x501000, 0x0) 00:04:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000048741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x6, 0xb, 0x0, &(0x7f00000001c0)) 00:04:52 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$inet6(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 00:04:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x20, 0x2, 0x6, 0xbe, 0x0, 0x3a4, 0x12, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x2a06, 0x9}, 0x42001, 0x20, 0x8, 0x4, 0x4, 0x1f, 0x800, 0x0, 0x2, 0x0, 0x9}, r1, 0xe, r0, 0x1b) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000140)='freezer.state\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000280)={0x10000000}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40000, 0x11) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6], 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900004c741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:52 executing program 1: r0 = inotify_init1(0x0) ftruncate(r0, 0x0) 00:04:52 executing program 2: r0 = socket$unix(0x1, 0x10000000805, 0x0) getsockname(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000000)=0x4c) close(r1) memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00', 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:04:52 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x51f7f4f31ccf872b, 0x0) [ 1768.808663][T22473] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1768.838333][T22465] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1768.846791][T22465] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xfffffffffffffeea, 0x0}}], 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x5451, 0x0) [ 1768.887139][T22465] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1768.895581][T22465] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1768.916948][T22490] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000140), 0x4) 00:04:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000060741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000001c0)=0x80) write$P9_RREMOVE(r1, 0x0, 0x0) 00:04:52 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 00:04:52 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) [ 1768.948682][T22465] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1768.957149][T22465] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1768.979402][T22465] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1768.987840][T22465] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:52 executing program 2: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@remote, @in6=@private1}}, {{@in6=@private0}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xfffffd5b) 00:04:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xfffffffffffffeea, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, 0x0, 0x0) 00:04:52 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x5450, 0x0) 00:04:52 executing program 0: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x5450, 0x0) [ 1769.075136][T22511] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:52 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000068741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:52 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$cgroup_int(r0, 0x0, 0x0) 00:04:52 executing program 2: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4) 00:04:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) 00:04:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x5451, 0x0) 00:04:53 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000004500), 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) tee(r0, r1, 0x0, 0x1) [ 1769.200063][T22536] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900006c741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:53 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$cgroup_pid(r2, 0x0, 0x0) 00:04:53 executing program 5: semget(0x0, 0x2, 0x209) 00:04:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000074741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1769.298163][T22556] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:53 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) 00:04:53 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0xc00c0, 0x80) 00:04:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900007a741d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1769.375638][T22568] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) dup2(r1, r2) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) 00:04:53 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fchdir(r1) 00:04:53 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) [ 1769.480012][T22581] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:53 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 00:04:53 executing program 2: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) 00:04:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa2830004001900090000000a1d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1851c0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) linkat(r1, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x0) 00:04:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005bf80)={r4, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000051a00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cf80)={0xff, [{}, {0x0, r4}, {r2}, {r3, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {}, {r3, r4}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r2, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r3, r4}, {r3}, {}, {}, {r3}, {r3, r4}, {}, {}, {r2}, {r2}, {0x0, r4}, {r3}, {r2}, {r3, r4}, {r2, r4}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {r3, r4}, {}, {}, {0x0, r4}, {r3}, {r3}, {}, {}, {}, {0x0, r4}, {}, {r3}, {r3, r4}, {}, {r3, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {r3}, {}, {r3}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {0x0, r4}, {r2, r4}, {}, {r2, r4}, {0x0, r4}, {r2, r4}, {r2, r4}, {}, {r2}, {0x0, r4}, {}, {}, {r2, r4}, {r3}, {}, {0x0, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {r3}, {r2, r4}, {0x0, r4}, {}, {r3, r4}, {r3, r4}, {}, {r3, r4}, {r3}, {}, {}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {r2, r4}, {r3}, {0x0, r4}, {r2, r4}, {r2}, {r2}, {r3}, {}, {}, {}, {r2, r4}, {r2, r4}, {}, {0x0, r4}, {0x0, r4}, {r2, r4}, {0x0, r4}, {r2}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {r3}, {}, {r3, r4}, {}, {0x0, r4}, {r6}, {r2, r4}, {r3}, {r2, r4}, {}, {r2, r4}, {r3, 0x0}, {r3}, {r2}, {}, {0x0, r4}, {}, {r2, r4}, {r2}, {}, {0x0, r4}, {}, {}, {r2, r4}, {r2}, {r2, r4}, {r2, r4}, {}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {r3}, {}, {}, {r2, r4}, {r2}, {}, {r2, r4}, {0x0, r4}, {r2}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {r2}, {r2}, {}, {0x0, r4}, {0x0, r4}, {r3}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {r3}, {r3}, {}, {0x0, r4}, {}, {}, {r2, r4}, {}, {}, {r2, r4}, {}, {0x0, r4}, {}, {r2}, {}, {0x0, r4}, {r3}, {0x0, r4}, {}, {r2}, {r3, r4}, {0x0, r4}, {r3}, {r2}, {r3}, {r2}, {r3}, {r3, r4}, {r2, r4}, {0x0, r7}, {0x0, r4}, {}, {r3}, {}, {r2}, {0x0, r4}, {r2}, {r2, r4}, {}, {r3}, {}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {r2}, {}, {r3}, {}, {}, {0x0, r4}, {}, {}, {r2}, {r6, r7}], 0x0, "47e9f264f8efb3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051f80)={0x6, [{}, {r3}, {r2, r4}, {}, {}, {r3, r4}, {r3}, {r3}, {}, {0x0, r4}, {r2}, {}, {}, {}, {r3}, {}, {r3}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r3}, {}, {}, {}, {}, {r2, r4}, {}, {r2}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {r2}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {}, {}, {r3, r4}, {}, {r2, r4}, {}, {r2, r4}, {}, {0x0, r4}, {r2}, {}, {}, {}, {r2, r4}, {}, {r3}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {r3}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {r3}, {}, {0x0, r4}, {}, {}, {}, {r2}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r3, r4}, {}, {r3}, {}, {0x0, r4}, {r3}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {r8}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2}, {r2, r4}, {}, {}, {r3}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r2}, {}, {}, {0x0, r4}, {}, {0x0, r9}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3, r4}, {}, {0x0, r4}, {r3}, {r2}, {r2}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {0x0, r10}, {r2}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}], 0x3f, "4c69a69153a7fc"}) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r12 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, 0x0, 0x30) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) r16 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, &(0x7f000005bf80)={r15, 0x0, "c6f8c2cb2599e9dc8fad9b890314908e6fad511bba74760dda3b78c0305311dc49e6b7b103d780133b7367ba99a94f25a04e251a8d58cbbf655fddf0021ffd2bbd7d5e7f2a0afb343c7cc008ce8f687cc3270e4df07328abfb83c33aa3815aaf8d4b05cffd91a8125fa76af126a40f7f1092609ae92d0dbbef3a65195d7ea7455a6cef5ba06f40f90a916153c51ac45a1d9cb847a346a9ecc0b7940ebe08741d9acc8c1bf380c0ea192033342c1f6ea74ff27b70ed47b5bbcbf04216d66e524eddd5692823ed23feab20ae447b918801dbe6c28cdafe4294f84ec2f893ba05454e784f783ed76d9a1da87f34467afcaeb97ae81e9ce74bda8f5dd5135a011522", "3659be393952f0e0924843f980dc972675d4d9c940bcd19e82ee45da25fcb6be53ae4c20157dd95a53209850931ed82cfd4f451aba63306e2cfab505796b97699ff4659bb8ff00d20c597d72c3447db0ef476792f95c28675e30c6aa893772b7f17e74e8b021debc385ab6346ca7462243b09ae250fc74b692f1450d68e78aeb31765cc0715135d4cdac94063522d3f446bc6fbf4a55dd8231baf0bd1a0dae45eeeb3aef00dac22eeb23a0dea8bc8e6a03932cd33ab9a463646f59b18a1c304b94c5b4ae07445eecc293c33faff92420b79a84dceecc1020d6bd2e9e531c0b8767fa62a4d807934f1e08d952ed0b2d9ac739738977fefefd81b137047ce2fba3f4e02d7093be8944a21ecc9937454ae10394bd70a1716611e1b1ab25a44f1438c870a607ef96d56d61f6dd3273e299716e456e7ba3edcd5b1c5fd9e853fccea038ad0367eee35866139945017cde83ee133e54b1a0a9741bd174afb939bb0649d589304321a7f8b16b72c1541937898e7165f582c3ec999fed8c6c937d535ef7261b30ae1dc3632f4f3c406badb70ca4788a411b26d02f25d6edaac0c3b280521f50b8a4fcc715e550c0236d80411bfb356213e5ea849dfdd26d7d4f6bf4c25d68953c3e32e1249589097ed9c11c7cca35c2d2709d42a97849413a09991ce97fc026da7de67f2d64e5f18288bbefd5532bada44e658f9ca10d277cf7edba97488d48fa5da398323229a120df546e5e6c913c96e83b8400a01a11711b760dae7205f1b7bb1cc11fab8c7239ac008b11a013c6b23a003e59cd011bfb2381eb3211af45b309984b6c02a2965c87a1cde5ed3c20f8ddf74cb86bc114af674ee447b948d2788e0391890663146d3096d0e27b1daf527100f2457ba0b14ce751d0f5dd3dbd860bff9c47edbf86ddffb256805c466c35eb114e318f290442b9d64520ab99dd26fa1b26a33b7f545f6d0541626f9a86e3b101242f7316166aaca4f3f80c7aa94bc407c941d65789a1eaf7b116050d02778c3ba798b786cf17e7c04b08ae41918343c1d3177724dd48702b6c112f3c30e524d2c4015e1fd6ae9d956a34c33e669ca52928be87c4ad0525b47b259bdcba1b341647fb96a28352aafc84baf23145ea9d2c9a70c333de5021149b2d660c89cea6872ce1f669ba118cc90b13789a756a8a42938d77d5db6ee92eae86f94b23cf2a079648edb3da9bd86a9d71d9ce69908c9c80905b8a8daee6ad98c54b4d054319ff6aa36bb80f39127faa08aaebc4b64207d560a6717ee4c0c9ea416423ab3929f8cdf7634c996e30fc81f7b8094ad324ce69b445286f06bf985a3434e9ed8fc7a38f4174b02e0e98280c8a38f8caca0559f9d69be5d86b84e32e826a726f2c0eb1a1682e63c31c1f3d56a93d203eb095509ed6e7f3c63ac59ecdf0803883ada914f1f8ee64ce9e0c22abbf3180f4d5e1ece8a9521f42432fdeb0656a26524c872ac62590f442fd701976d98d3018f94e153bdd85a0215d13c7784ff0b503b588e0d613b9056ee7e93efd1bee8ce606b425b591c7e7eb43cc7c9e5f3e263fc4d019de359a9e51d35ca4c5f71341458073c239c9728fd3b9ef47c80902166451cc109d20ab6cfca825f35b0aca3d05c05fda1e162fdef2bc3a9d914a1c719effb68060a262c26da165acfcfcf1aad6b4d27564cf99f9a82010fde16e33d80128cb7187d57659d7d754a3e0147c06627b93582d96a5891d5fa4690b87a8e74b3bcaf89e75764d32bfbc54d90bbf28f87b2caaf88e28b440c2ce76bdb2f0a95629c2e3822effec3680110abf78895e5f7ec9cfb82d7842c43ca34d851b59b863a6d6061c5bc0688aeee823d7bde013711753506b9d7c19962cf422307be68fa7a534f5adf26355b8081e5fcf2791813847775bf74d37974dde12564f2d571f720bd9792714b09d9588d837b1629da4c2e5edf8d866f948a47787d8c961d3ce5d7997babed06cf6e17eb57402bb3a4700017e678161548abc1dbdc021c116530bab488cbb157feaef7e8545b10ae592dc2942490ed7783e3056cf1432f647147901bc69be52837395818bad6fbb3c9d698ec54c02e3600308be84ec682c6281497b7afefb984fb4c22fdf4e72b5736d9e8d439f5945e6f431f289a7963d2e6b612273f9a15bdbc12370bf4f6d75bb3a7d7af82b98c7576ef2f5186b3ef36277ed262159112cdda7505d65afd8bd14248269ffcfdcb74198d30fd216a5412f4f407fc8f4b999003f35b6694acb6d9c24403cf5d3cb95e52a8f7ea7eb504f60152fe15b6854e5b206355901be1581ad4cf454f7c2237934f3e1c567899d1b88f0f14a0fb41d685b3c451490feb15691ecc7ab8fd29744718d53f5452ec4f2713efc89e2547a3a66c271a65bbbdc0f4efd5ac0d1fe1d83fc6a2dbcfb24a4ef302556ac42207fa976ca128dfb950b46388d95ecc4f53230e1572d84c854b772d1a0ef369e626dad505cac2db2e0f733696742a85699142b764171fccd70998e27126c550ea342bc075496979e85a387e705203398d8c93b5584e2336ea0bea14ebd6349eb80010e212f464798f97fbaf9c4f2817e4eefb6b6fb06f5c6703781a5605f4c619e45520473588f64ab21656a28cb6c2ac183e14e4002042c26fcbb17f24e02207701cb811baba1886663daaebf93f8b11495cc287742d9a786da6e3911f2ca5a141de3e2bee1cae83f467d2ffa08449a7a519a81f1683937c07a98e53991fca13dc4fb992995725514565574a98574e4d9a2b2d2b4a084fcabe8332fc1083439f912ce2192f306f3ad864294f30a44a41b8778f11b419965c4f6df1495062ca783c69f26c3d5e3f9cb10f1b9d2a26d9e1fc3c1380c7969eed3a20d8775138b3412ae931566c0f6427e7b7e20033bae9f1d7bbbfa38ab65abd07beb9c6106dc9c562b4cafea056de1dd5cfa3eb74b2895ee63611129edca330125e13c42406d7f7ae73e6b782ae5433826abee44eea2ecbae32b473566e137fae850d0cb4b3e65cc1c5ea371b0c1549a9cb7f6946d462eb83f583a7411c40dc759c6519ce5b451c241737379d4a7898044ef92bb7af29a37cb5f7cb5cdb3e18d8075cd6f7ad139541452dab7a8d283032d16bc267686cf6dd2aa2629a73d5da564b66aa38be1dc38bf55b9080ea143112c957f231600f65d7246c103575b9090c90f33853d19f9c283e2b5372fd297161a88cbdc4196ff3fc7372c7ab91a12bdbd812fb65c85c2195a2a83a9b3d524cae3f10ae236e5895295abfe4322bb1be76eaca477af7ecf1ec6f2860cc5a6fab617b478314dcbd2cf860ca3dc6fcec2984f2e9b2deeea8a029cb3bdbd579faa2a348f497feb960693a55e80dc75f856ddc74dbd5a99fc462e76ea80ddcd0467db82d055f0ffe3172f0772e285a51f62123bea7459dd59c62fc6618880bca9bd8c82538a441d64034179f76e7a6e9b17c101ea4ff208db90df8acfd3d445315f03f2ea9e98dca492bc366392dcbcd5f880be45090b2896fed03854c6d1ca30a3c17f1376fd9b3cf57205e8ccfbe1b6281d8065a772ee711414405405a3cd409ad60df80a3bcad8944b5c05d41d70679312af00c25cd8e3d3c43a6061c2ec0e2f6813322bb52a405e65cc2cde242eaf800cfe12b2131670de9c20b63ef24a1569a22a03a0aebc54995797b80dc7a62b6af1952b497f5ef54e986eadd079c06899d28909013e9a8c0a4dc4d4c0372745734d38bc045d0a20a8b427bbc440d3b877d25ce850f9093819c1e971222b4378d5e3c61e315ccd9c3a427bb75ce8f386fcbf0d79a2c08173472a90d78b754af0aae26ebf96cab19cdeeb80e470995fb2d43e6cef2e3d95f496730bd10539b67c2c4853c3b6e9d74170af1bd9d4439e106f9538b5d97751564e3d2972c9d795d7f7fd87d1af5cb2edfe36e57961a1a36b366d0c1321216489a8e073bd0ad357aecd1b4cdb68840d042ca89d36bc7ceff46ac0286c2738e2a750a66f618908ff49b4941e7ed5b69607791ebb8535ecc671c1aca27d36c8130dcd51e3e1b9964ddaa632b15e89ddc8b5161c394cef3d9a3e42857961088b155d3415d09b278a94d2255754b9c05dc35da66477487d730c4b10563e439e3a4293723d5f25ffe6fcef9fe67e005fff77d957e0b46f7de8d23d2fec973f4f7f279f6cc04f1f93ccb7b61e4ceea9a690aa0c76e3de4e95e215f51bdf71b83e8160b730844900c1e592b68f9b8b2a4ac83adc220d5d8bafd23e1d57ae18a8b4b6cdee707821fe5f7a630123aa7fad0eb7d01885149fb2f2868153647a511215cdc0b62e772e53f3d03cbb2c37575c0629fdf46832af46924f05b6b1c006eb7344289fc0620b30137851e874290632774fcfe17888fb36325339a30b34a7957c71f28c797f07878116a2ef8e421149f0243a28210da6e88487d6e7b1b42bbb9a53b65c0073210d6a60a42d50f1863cbde06ee9226f75315d1398c33a39897f6fea9e22c27291566cab238c580e69f156b5ab202f93f49d174afc6591cae91eae1b541030ee98c13724133c2fc518e1bfad747538db6e1f9854345188a856efe8411db45a3ab89f85bc288842539c761548a2096b57400d40959d0988eb83db235401539d0c7e80b7f24b13001ecd490481530730ec2f7ee6530060c13124216d902b184316ec2a273d762c35d239e7dcc66a9fa1ae5c9eed538310f9992786999b1d93677404b58048cc31fe0484bcd44a86994fdb3ce074b289c17daddedfa9c9a51e1fa2fac50dc82b31a0930556f12e5ff1c25ff869292581d95c9b55326b54aee20895cbb0bbdb36a402fe8f9340a757e3049eaade8a5a540eee795dad75a087be8f91d0ff3a5c5d4d5859b75f3505f217417df8c643331de439fb8c9fba6ac278711375ae346524a297432872fc76d16a2d6a3a88fed26255c2a926206cd40ba88b087695a92d265aa9dc62164cac9fc419d2823613920739df81973bb157dc1547cb7d3ff43c843df007ece3db9b2d5834527cfc6889307a00975e1cc92b21bfc87f0cc34a9e091eacafdacbb2179ca1fc2265810c3d32910ca78b77683d7d9a24eaaf1d837f0a12ac84c3714fd37740a1c500b488be6624e016ad3873a238f71270d99c5ad7b4ac6bfd5aec9779e12b32be54ed4b8f1b8fabf1a51a24b2e48d69f0b2ec3966e0ae11b4f75b5c69491615b8dc5d00c092e76408e902d86946184610cebd56dc42c938f4abd4fc448100478ac7035373ff6981ffee33d128916b96480579dde622ac274a457dc4f493e48617fbfa350a4cd656c2ffc2c6b3d2d2de4f77a4e8a2ffb24749e5e300dbbd2d17003ad3a942f06193335cd101eace6236aa28efe2361e60484872eef05c780ca83b699589f1a11507d9269aff2fac5e46cc13b4207cc65f3f19781dca"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r16, 0x81f8943c, &(0x7f0000051a00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cf80)={0xff, [{}, {0x0, r15}, {r13}, {r14, r15}, {}, {}, {0x0, r15}, {0x0, r15}, {r14}, {0x0, r15}, {0x0, r15}, {}, {r14, r15}, {}, {0x0, r15}, {0x0, r15}, {r13, r15}, {r13, r15}, {0x0, r15}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {r14, r15}, {r14}, {}, {}, {r14}, {r14, r15}, {}, {}, {r13}, {r13}, {0x0, r15}, {r14}, {r13}, {r14, r15}, {r13, r15}, {}, {0x0, r15}, {}, {0x0, r15}, {}, {r14, r15}, {}, {}, {0x0, r15}, {r14}, {r14}, {}, {}, {}, {0x0, r15}, {}, {r14}, {r14, r15}, {}, {r14, r15}, {}, {}, {0x0, r15}, {0x0, r15}, {r14}, {}, {r14}, {r13, r15}, {}, {0x0, r15}, {0x0, r15}, {}, {}, {0x0, r15}, {r13, r15}, {}, {r13, r15}, {0x0, r15}, {r13, r15}, {r13, r15}, {}, {r13}, {0x0, r15}, {}, {}, {r13, r15}, {r14}, {}, {0x0, r15}, {r13, r15}, {}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {}, {r14}, {r13, r15}, {0x0, r15}, {}, {r14, r15}, {r14, r15}, {}, {r14, r15}, {r14}, {}, {}, {r13, r15}, {}, {0x0, r15}, {0x0, r15}, {}, {r13, r15}, {r14}, {0x0, r15}, {r13, r15}, {r13}, {r13}, {r14}, {}, {}, {}, {r13, r15}, {r13, r15}, {}, {0x0, r15}, {0x0, r15}, {r13, r15}, {0x0, r15}, {r13}, {}, {}, {}, {0x0, r15}, {}, {0x0, r15}, {}, {r14}, {}, {r14, r15}, {}, {0x0, r15}, {r17}, {r13, r15}, {r14}, {r13, r15}, {}, {r13, r15}, {r14}, {r14}, {r13}, {}, {0x0, r15}, {}, {r13, r15}, {r13}, {}, {0x0, r15}, {}, {}, {r13, r15}, {r13}, {r13, r15}, {r13, r15}, {}, {}, {}, {}, {0x0, r15}, {}, {0x0, r15}, {}, {}, {}, {}, {r13, r15}, {r13}, {}, {r13, r15}, {0x0, r15}, {r13}, {}, {0x0, r15}, {}, {}, {}, {0x0, r15}, {r13}, {r13}, {}, {0x0, r15}, {0x0, r15}, {r14}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {}, {0x0, r15}, {0x0, r15}, {}, {0x0, r15}, {r14}, {r14}, {}, {0x0, r15}, {}, {}, {r13, r15}, {}, {}, {r13, r15}, {}, {0x0, r15}, {}, {r13}, {}, {0x0, r15}, {r14}, {0x0, r15}, {}, {r13}, {r14, r15}, {0x0, r15}, {r14}, {r13}, {r14}, {r13}, {r14}, {r14, r15}, {r13, r15}, {0x0, r18}, {0x0, r15}, {}, {r14}, {}, {r13}, {0x0, r15}, {r13}, {r13, r15}, {}, {r14}, {}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {r13}, {}, {r14}, {}, {}, {0x0, r15}, {}, {}, {r13}, {r17, r18}], 0x0, "47e9f264f8efb3"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f000004ee80)={{0x0, 0x1ad, 0xfffffffffffffff7, 0x7, 0x3, 0x3, 0x8, 0x7f, 0x9, 0x3, 0xe93, 0x5, 0x9, 0x5, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004fe80)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r18}, {}, {r19}], 0x4, "09d4e2236be646"}) truncate(0x0, 0x0) 00:04:53 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x5450, 0x0) 00:04:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 00:04:53 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000251d8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:53 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) [ 1770.180444][T22604] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1770.239557][ C0] sd 0:0:1:0: [sg0] tag#5226 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1770.249925][ C0] sd 0:0:1:0: [sg0] tag#5226 CDB: opcode=0xe5 (vendor) [ 1770.256801][ C0] sd 0:0:1:0: [sg0] tag#5226 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1770.266369][ C0] sd 0:0:1:0: [sg0] tag#5226 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1770.275931][ C0] sd 0:0:1:0: [sg0] tag#5226 CDB[20]: ba [ 1770.297890][T22595] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1770.306336][T22595] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1770.331025][T22595] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 00:04:54 executing program 5: semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000000)=""/4096) 00:04:54 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 00:04:54 executing program 1: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x5450, 0x0) 00:04:54 executing program 0: fchmodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) 00:04:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000740a8568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1770.339463][T22595] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1770.349013][T22626] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 1770.399072][T22607] ================================================================== [ 1770.407178][T22607] BUG: KCSAN: data-race in uprobe_dispatcher / uprobe_dispatcher [ 1770.415333][T22607] [ 1770.417648][T22607] write to 0xffff8881359bdde8 of 8 bytes by task 22632 on cpu 0: [ 1770.425359][T22607] uprobe_dispatcher+0x46/0x670 [ 1770.430240][T22607] uprobe_notify_resume+0x73a/0x1310 [ 1770.435519][T22607] exit_to_user_mode_prepare+0xcb/0x190 [ 1770.441064][T22607] irqentry_exit_to_user_mode+0x5/0x10 [ 1770.446522][T22607] asm_exc_int3+0x31/0x40 [ 1770.450841][T22607] [ 1770.453152][T22607] read to 0xffff8881359bdde8 of 8 bytes by task 22607 on cpu 1: [ 1770.460766][T22607] uprobe_dispatcher+0x37/0x670 [ 1770.465613][T22607] uprobe_notify_resume+0x73a/0x1310 [ 1770.470895][T22607] exit_to_user_mode_prepare+0xcb/0x190 [ 1770.476444][T22607] irqentry_exit_to_user_mode+0x5/0x10 [ 1770.481902][T22607] asm_exc_int3+0x31/0x40 [ 1770.486225][T22607] [ 1770.488529][T22607] value changed: 0x0000000000001977 -> 0x0000000000001978 [ 1770.495623][T22607] 00:04:54 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) 00:04:54 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) write$P9_RREADLINK(r1, 0x0, 0x0) [ 1770.497932][T22607] Reported by Kernel Concurrency Sanitizer on: [ 1770.504062][T22607] CPU: 1 PID: 22607 Comm: syz-executor.4 Not tainted 5.14.0-rc6-syzkaller #0 [ 1770.512804][T22607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1770.522843][T22607] ================================================================== 00:04:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file0\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000400000000000080008000d001000", 0x24) sendmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="24000000150007031dfffd946fa283000400190009000000741d8568201ba3a20400ff7e280000002500ff1803abf53e21bca91d5384d97f9d22a839ddb89e4b34947fd7cb91d34e2009a05f", 0x4c}], 0x1}, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000080)=""/181, 0xb5}, {&(0x7f0000000140)=""/33, 0x21}, {&(0x7f0000000200)=""/227, 0xe3}, {&(0x7f0000000300)=""/114, 0x72}], 0x5, 0x7, 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) 00:04:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa28300040019000900000074648568201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8042, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) sendfile(r2, r0, 0x0, 0x0) 00:04:54 executing program 1: semget(0x3, 0x2, 0x5ec) 00:04:54 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)) 00:04:54 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x420c1, 0x0) write$nbd(r0, 0x0, 0x1010) [ 1770.584355][T22595] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1770.592819][T22595] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1770.610276][T22595] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1770.618744][T22595] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) ioctl$FIDEDUPERANGE(r1, 0x5451, 0x0) 00:04:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') write$cgroup_devices(r0, 0x0, 0x9) 00:04:54 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000002180), 0x4082, 0x0) write$binfmt_elf64(r0, 0x0, 0xfc80) 00:04:54 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80480, 0x0) 00:04:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d850a201ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 1770.751444][T22664] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1770.759910][T22664] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) read(r1, &(0x7f0000000000), 0x0) [ 1770.808543][T22664] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1770.817011][T22664] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:54 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x5450, 0x0) 00:04:54 executing program 2: r0 = inotify_init1(0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) 00:04:54 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r1 = dup(r0) ioctl$sock_proto_private(r1, 0x5450, 0x0) 00:04:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8525201ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80) dup2(r0, r1) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, 0x0, 0x0) 00:04:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x400) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000100)="a1e230b6", 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001780)={0x0, @local, @remote}, &(0x7f00000017c0)=0xc) bind$packet(r3, &(0x7f0000001800)={0x11, 0xf5, r4, 0x1, 0x20}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg$sock(r1, &(0x7f0000001680)=[{{&(0x7f0000000100)=@l2={0x1f, 0x1921, @none, 0x3ff, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)="5d58093a40d410aa076e5c1dd01a121fe5abf68c9f711f40883925e28cf9e5760c269fdf5b3a01d195b2e1463e9b9c5cc018fa63e14b2ff26014ebbc3a8ceaeeb83111b8be4c47c44e0d176da8c8050bd7cf04f3727ddc51df18b7adda3638ffd814bc4d3d4fe474e9e5f9d667a6608b3cd4da67f2be6fbc2c33b267df4a39ff0f000021d7e8c7aa5c94b481c69f98b12cb7d5562019ff55", 0x98}], 0x1, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}}, {{&(0x7f0000000340)=@can={0x1d, r5}, 0x80, &(0x7f0000001540)=[{&(0x7f00000003c0)="9773c4c72b9d0efad5c541755473f8826dfaac8fd797e9a0565108bc3956ca6c0a5088da72058dfce1f2f143b15461f7f7834f3a66fbd3c84e54a5d8dbb68f17bba2814c71e227bc1702c2f5da0742bb84c8f95bfebb85d2aa4567b77c", 0x5d}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="256db716698470d0d53bcf8d8e941f42096b37a63f1383f5db17a23e78573dacf9c1f5c0390a6dbce789ef9951bee602d745c02f126f7fed7f8965a0eefab44a8545e2d9d11444279094768a70602c7f3fabba4067087a3027a57a5cc607dc6ca2b3e69bce939b0eff4876af93d090f67e0aa4880ea6cc0b6dffe0bdb2c021aa78aac022ae3172ea19806229b8c204537d47253f673002d5cc2c469764a566f1bd61ee31c620bfc1", 0xa8}, {&(0x7f0000001500)="327f03be6f84996326dc37b8b90ed83ad62fc442115f9a3cd8dfd2be758b200e85457189b1d5fee1c4cd2718feb571f71bfa447fb8ece5c716d8", 0x3a}], 0x4, &(0x7f0000001580)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xffffffe0}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xa14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xf0}}], 0x2, 0x40081) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/exe\x00', 0x2000, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000001700)={0x6, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xdc01}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xb84e}, 0x0, 0xfffffffffffffffd, r6, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) truncate(0x0, 0x0) 00:04:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, 0x0, 0x0) 00:04:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001b40), 0x0, 0x0) 00:04:54 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$BTRFS_IOC_SYNC(r0, 0x5450, 0x748000) 00:04:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d85680a1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:54 executing program 5: r0 = msgget$private(0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) 00:04:54 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xdc01}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xfff, 0x5, 0x8, 0x2, 0x100000001, 0x441}, {0x6, 0xfffffffc, 0x6, 0x10000, 0x100, 0x6}], ['\x00', '\x00']}) perf_event_open(&(0x7f0000000080)={0xe1fa227fbdd209f4, 0x80, 0x1f, 0xaf, 0x4, 0x7, 0x0, 0xa7cf, 0x820, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x1, 0x4, 0x8, 0x2, 0x4, 0xaed3, 0x2, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) 00:04:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, r2, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:54 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup(r0) accept$inet(r2, 0x0, 0x0) 00:04:54 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = getegid() fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xee00, r0, 0x0) 00:04:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568251ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:54 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fstatfs(r0, &(0x7f0000001240)=""/159) 00:04:54 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/class/power_supply', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) 00:04:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f00000000c0)) 00:04:54 executing program 1: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x5450) 00:04:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568291ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:04:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80) dup2(r0, r1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) 00:04:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xfffffffffffffeea, 0x0}}], 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)) [ 1771.211108][T22742] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1771.219573][T22742] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1771.271997][T22742] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1771.280459][T22742] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 [ 1771.307042][T22742] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1771.315491][T22742] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:55 executing program 4: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x5452, &(0x7f0000000100)={'dummy0\x00', {0x2, 0x0, @dev}}) [ 1771.355414][T22742] ref_ctr going negative. vaddr: 0x20000004, curr val: -31789, delta: -1 [ 1771.363898][T22742] ref_ctr decrement failed for inode: 0x361c offset: 0xdc01 ref_ctr_offset: 0x4 of mm: 0x00000000d781b0f2 00:04:55 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xffffff62, 0x0}}], 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r1, 0x5450, 0x0) 00:04:55 executing program 1: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getpeername$netlink(r0, 0x0, &(0x7f0000000200)) 00:04:55 executing program 5: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0xee00, 0x0) 00:04:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20200ff7e", 0x24}], 0x1}, 0x0) 00:04:55 executing program 0: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x5451, 0x0) 00:04:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 00:04:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000100)=0xaf) dup3(r0, r1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 00:04:55 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x5452, 0x400000) 00:04:55 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setlease(r0, 0x407, 0x0) 00:04:55 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20300ff7e", 0x24}], 0x1}, 0x0) 00:04:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) fstatfs(r1, &(0x7f0000000240)=""/272) 00:04:55 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) 00:04:55 executing program 1: pipe2(&(0x7f0000000840)={0xffffffffffffffff}, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 00:04:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x5451, 0x0) 00:04:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8901, &(0x7f0000000180)) 00:04:55 executing program 4: open$dir(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) 00:04:56 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000002080), 0x0, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) 00:04:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20500ff7e", 0x24}], 0x1}, 0x0) 00:04:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000100)=0x80) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x5450, 0x0) 00:04:56 executing program 1: listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:04:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20600ff7e", 0x24}], 0x1}, 0x0) 00:04:56 executing program 1: msgget(0x0, 0x2) 00:04:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) write$9p(r2, 0x0, 0x0) 00:04:56 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 00:04:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80) 00:04:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20700ff7e", 0x24}], 0x1}, 0x0) 00:04:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:04:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) 00:04:56 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x1ff) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0x5421, 0x400000) 00:04:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20800ff7e", 0x24}], 0x1}, 0x0) 00:04:56 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSISO7816(r0, 0xc0285443, 0x0) 00:04:56 executing program 5: semget(0x1, 0x0, 0x486) 00:04:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) dup3(r0, r1, 0x0) getsockopt$sock_int(r1, 0x1, 0x27, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 00:04:56 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x73000000) 00:04:56 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) fork() 00:04:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x8, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) [ 1773.120737][T22924] validate_nla: 12 callbacks suppressed [ 1773.120750][T22924] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20900ff7e", 0x24}], 0x1}, 0x0) 00:04:56 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 00:04:57 executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = dup(r0) getsockopt$sock_buf(r1, 0x1, 0xa, &(0x7f0000000000)=""/142, &(0x7f00000000c0)=0x8e) 00:04:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0) 00:04:57 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5450, 0x0) 00:04:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r3 = dup(r0) dup2(r3, r2) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) [ 1773.242862][T22946] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20a00ff7e", 0x24}], 0x1}, 0x0) 00:04:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x8000}]}) 00:04:57 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) utimensat(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) 00:04:57 executing program 1: pipe2$9p(&(0x7f0000000180), 0x800) 00:04:57 executing program 0: pipe2$9p(&(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_script(r0, 0x0, 0x0) 00:04:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 00:04:57 executing program 1: semget(0x1, 0x4, 0x203) [ 1773.388190][T22970] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:57 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1000) 00:04:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20b00ff7e", 0x24}], 0x1}, 0x0) 00:04:57 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0x0) 00:04:57 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x5450, 0x0) [ 1773.514340][T22994] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) sendmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 00:04:57 executing program 1: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl(r1, 0x5452, &(0x7f00000000c0)) 00:04:57 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x1ff) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) getsockname(r3, 0x0, &(0x7f0000000200)) 00:04:57 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockname(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) write(r1, 0x0, 0x0) 00:04:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20c00ff7e", 0x24}], 0x1}, 0x0) 00:04:57 executing program 0: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockname(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000140)=0x80) write$tcp_congestion(r1, 0x0, 0x0) 00:04:57 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20d00ff7e", 0x24}], 0x1}, 0x0) [ 1774.206591][T23020] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:58 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$inet6(r2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x5421, &(0x7f00000000c0)) 00:04:58 executing program 0: setreuid(0xee01, 0x0) r0 = getuid() setreuid(0x0, r0) semget(0x3, 0x0, 0x50b) 00:04:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0xfee8) 00:04:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20e00ff7e", 0x24}], 0x1}, 0x0) [ 1774.277240][T23037] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:58 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_out(r0, 0x5421, &(0x7f0000000140)) 00:04:58 executing program 0: r0 = msgget$private(0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 1774.328382][T23048] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) 00:04:58 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r0, 0x0, 0x37) 00:04:58 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system', 0x100, 0x60) 00:04:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a21000ff7e", 0x24}], 0x1}, 0x0) 00:04:58 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x1eb641, 0x1cb) 00:04:58 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 00:04:58 executing program 2: r0 = memfd_create(&(0x7f0000000000)='%\'&[\\[!\x00', 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 00:04:58 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/237) 00:04:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a21100ff7e", 0x24}], 0x1}, 0x0) 00:04:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1851c0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) [ 1775.084331][T23073] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:58 executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) utime(&(0x7f00000001c0)='./file0\x00', 0x0) 00:04:58 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = getegid() fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, r0, 0x1000) 00:04:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, 0x0, 0x0) 00:04:58 executing program 4: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, r2, 0x0) fadvise64(r2, 0x0, 0x0, 0x0) [ 1775.192621][T23090] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000080)="0c3ae8f6be28d4676e92229faa6a9a6aed3eca9ca3b8afa260dd15feb8452141715df1582161121dff9d4b83bb3b5dcb273f56768e041be3af4bc77a0164d638297b0dca5add230e4f40b55fa476ecf57d4b3b", 0xffffff9a, 0x20000000, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000240)) 00:04:59 executing program 5: socket$inet6(0xa, 0x6564c5ca2e2e9398, 0x0) 00:04:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a21200ff7e", 0x24}], 0x1}, 0x0) 00:04:59 executing program 1: getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 00:04:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a21400ff7e", 0x24}], 0x1}, 0x0) 00:04:59 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept(r2, 0x0, 0x0) readv(r3, 0x0, 0x0) 00:04:59 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x143083, 0x0) fdatasync(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) r3 = accept(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x5450, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000240), 0x4) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x0, 0x0) r4 = socket$inet6_icmp(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x2, {{0xa, 0x4e24, 0x0, @empty, 0x67}}}, 0x88) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x5450, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@private1, @local, @empty, 0x6, 0x101, 0x200, 0x0, 0x4, 0x8141000c}) setsockopt$inet_group_source_req(r3, 0x0, 0x0, 0x0, 0x0) 00:04:59 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x80, 0x0, 0x0) [ 1775.296750][T23118] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:04:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) 00:04:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$int_out(r1, 0x800000005450, 0x0) 00:04:59 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0x5451, 0x0) 00:04:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000002680)=[{{&(0x7f0000001800)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000002800)) 00:04:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20043ff7e", 0x24}], 0x1}, 0x0) 00:04:59 executing program 1: pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x5452, &(0x7f0000000180)={'vxcan1\x00', {0x2, 0x0, @dev}}) 00:04:59 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x0) 00:04:59 executing program 2: semget(0x3, 0x1, 0x216) 00:04:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a2005cff7e", 0x24}], 0x1}, 0x0) 00:04:59 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) 00:05:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20402ff7e", 0x24}], 0x1}, 0x0) 00:05:00 executing program 1: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x5421, &(0x7f0000001240)={0x6, 'erspan0\x00'}) 00:05:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0x8903, &(0x7f00000005c0)) 00:05:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$binfmt_elf32(r0, 0x0, 0xa8) 00:05:00 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001d00)={0x0, 0x3938700}) 00:05:00 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$P9_RATTACH(r2, 0x0, 0x0) 00:05:00 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) 00:05:00 executing program 2: mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 00:05:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20403ff7e", 0x24}], 0x1}, 0x0) 00:05:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futimesat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) 00:05:00 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x19, 0x0, &(0x7f0000000180)) 00:05:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r2 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) dup2(r2, r1) fsync(r1) 00:05:00 executing program 2: pipe(&(0x7f0000001300)={0xffffffffffffffff}) fcntl$lock(r0, 0x0, 0x0) 00:05:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20404ff7e", 0x24}], 0x1}, 0x0) 00:05:00 executing program 4: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 00:05:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20405ff7e", 0x24}], 0x1}, 0x0) 00:05:00 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) dup3(r0, r1, 0x80000) 00:05:00 executing program 1: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 00:05:00 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc80, 0x0) 00:05:00 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 00:05:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20406ff7e", 0x24}], 0x1}, 0x0) 00:05:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) dup2(r0, r1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x6, 0xb, 0x0, &(0x7f0000000000)) 00:05:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1851c0, 0x0) utimensat(r0, 0x0, 0x0, 0x100) 00:05:01 executing program 5: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockname(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000140)=0x80) write$cgroup_subtree(r1, 0x0, 0x0) 00:05:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x5452, &(0x7f0000000000)) 00:05:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getpeername(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000280)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x6, 0xb, 0x0, &(0x7f0000000040)) 00:05:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20407ff7e", 0x24}], 0x1}, 0x0) 00:05:01 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) 00:05:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000000)=0x54) 00:05:01 executing program 0: socket$netlink(0x10, 0x3, 0x9) 00:05:01 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x5450, 0x0) 00:05:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000380)=0x80) write$P9_RLERRORu(r1, 0x0, 0x0) 00:05:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) 00:05:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20408ff7e", 0x24}], 0x1}, 0x0) 00:05:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xfffffffffffffeea, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, 0x0, 0x0) 00:05:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f00000000c0)) 00:05:01 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$BTRFS_IOC_SEND(r0, 0x5450, 0x0) 00:05:02 executing program 2: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r2, 0xf, &(0x7f0000000040)) 00:05:02 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') close(r0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 00:05:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20409ff7e", 0x24}], 0x1}, 0x0) 00:05:02 executing program 1: mknod(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x26000, 0x18) 00:05:02 executing program 0: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x5450, 0x0) 00:05:02 executing program 5: r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockname(r0, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000640)=0x80) write$P9_RCREATE(r1, 0x0, 0x0) 00:05:02 executing program 4: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0, &(0x7f0000000100)) 00:05:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x103) rmdir(&(0x7f0000000200)='./file0\x00') [ 1778.854559][T23351] validate_nla: 10 callbacks suppressed [ 1778.854572][T23351] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:05:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a2040aff7e", 0x24}], 0x1}, 0x0) 00:05:02 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f00000023c0)='/sys/class/power_supply', 0x280880, 0x22) 00:05:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x6, 0xb, 0x0, &(0x7f0000000000)) 00:05:02 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5452, &(0x7f0000001740)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 00:05:02 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 00:05:02 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) 00:05:02 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) [ 1778.961314][T23373] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:05:02 executing program 0: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 00:05:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000000)=0x80) fcntl$getflags(r1, 0x0) 00:05:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a2040bff7e", 0x24}], 0x1}, 0x0) 00:05:02 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept(r2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x5421, &(0x7f0000000040)) 00:05:02 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_UNIMAP(r0, 0x4b67, 0x0) 00:05:02 executing program 2: semget$private(0x0, 0x7, 0x11) 00:05:02 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0), 0x0, 0x1) 00:05:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5451, 0x0) 00:05:02 executing program 1: semget$private(0x0, 0x4, 0x14e308c5584b119a) [ 1779.133462][T23406] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:05:02 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a2040cff7e", 0x24}], 0x1}, 0x0) 00:05:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) getsockname$packet(r1, 0x0, &(0x7f0000002740)) 00:05:02 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup2(r1, r0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) 00:05:02 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x80400, 0x0) 00:05:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x5450, 0x0) 00:05:03 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) fchown(r2, 0x0, 0x0) [ 1779.236502][T23434] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:05:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a2040dff7e", 0x24}], 0x1}, 0x0) 00:05:03 executing program 0: semget(0x2, 0x3, 0x200) 00:05:03 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = dup(r0) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x55) 00:05:03 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet(r0, 0x0, 0x0) [ 1779.355059][T23463] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:05:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) ioctl$FIGETBSZ(r1, 0x5450, 0x0) 00:05:03 executing program 5: semget(0x2, 0x0, 0x281) 00:05:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a2040eff7e", 0x24}], 0x1}, 0x0) 00:05:03 executing program 0: semget(0x2, 0x3, 0x200) 00:05:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) 00:05:03 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:05:03 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x5452, &(0x7f0000000080)={'vxcan1\x00', {0x2, 0x0, @dev}}) 00:05:03 executing program 0: semget(0x2, 0x3, 0x200) 00:05:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20410ff7e", 0x24}], 0x1}, 0x0) [ 1780.063249][T23488] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:05:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000002440)=@pppoe={0x18, 0x0, {0x0, @remote, 'veth1_macvtap\x00'}}, 0x80) 00:05:03 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000003600), 0x8, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') dup3(r0, r1, 0x0) signalfd(r1, &(0x7f0000000140), 0x8) 00:05:03 executing program 5: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 00:05:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 00:05:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20411ff7e", 0x24}], 0x1}, 0x0) [ 1780.154284][T23508] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:05:03 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 00:05:03 executing program 0: semget(0x2, 0x3, 0x200) 00:05:04 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x5451, 0x0) 00:05:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 00:05:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0xfffffffffffffeea, 0x0}}], 0x0, 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_mreq(r1, 0x29, 0x8, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) [ 1780.237759][T23525] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:05:04 executing program 4: r0 = memfd_create(&(0x7f0000000080)=',*@/[*$},\x00', 0x0) readv(r0, 0x0, 0x0) 00:05:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20412ff7e", 0x24}], 0x1}, 0x0) 00:05:04 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x1ff) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup3(r1, r0, 0x0) r3 = accept4$packet(r2, 0x0, 0x0, 0x0) fcntl$addseals(r3, 0x2, 0x0) 00:05:04 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 00:05:04 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000000)=0x80) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x5450, 0x0) 00:05:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x78) dup2(r0, r1) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, 0x0, 0x0) 00:05:04 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0) [ 1780.365981][T23555] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 00:05:04 executing program 0: r0 = memfd_create(&(0x7f0000000140)='{^&/\x00', 0x0) fdatasync(r0) 00:05:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000260007031dfffd946fa283000400190009000000741d8568201ba3a20425ff7e", 0x24}], 0x1}, 0x0) 00:05:04 executing program 2: semget(0x1, 0x1, 0x284)